16198 matches found
CVE-2014-10016
Multiple cross-site scripting XSS vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 unspecified vectors related to purchaselimit or the 2 name, 3 intl, 4 nocod, or 5 time parameter in an adddeliverymethod acti...
Multiple HTML Injection Vulnerabilities in BEdita CMS 'index.php'
BEdita is a web development framework that provides a full-featured content management system. Multiple HTML injection vulnerabilities exist in BEdita CMS 'index.php' because it fails to properly filter user-supplied input. An attacker can execute the provided HTML and script code in the context ...
CVE-2014-9271
Cross-site scripting XSS vulnerability in filedownload.php in MantisBT before 1.2.18 allows remote authenticated users to inject arbitrary web script or HTML via a Flash file with an image extension, related to inline attachments, as demonstrated by a .swf.jpeg filename...
Good For Enterprise Android HTML Injection
https://labs.integrity.pt/articles/good-for-enterprise-android-html-injection-cve-2014-4925/ 1. Vulnerability Properties Title: HTML Injection in Good for Enterprise Android CVE ID: CVE-2014-4925 CVSSv2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Vendor: Good Technology http://www1.good.com/...
Cross site scripting
Cross-site scripting XSS vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php...
Unspecified HTML Injection Vulnerability in Open-Xchange Server/OX App Suite
Open-Xchange Server is a partially open source project that develops collaborative software such as email, calendars, etc. OX App Suite is an integrated cloud environment that helps users manage their email, tasks, schedules, documents, etc. on any device. An unspecified HTML injection...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SAP NetWeaver Business Client NWBC for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 roundtrips parameter, aka SAP Security Note 2051285...
CVE-2014-4635
Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4635
Multiple cross-site scripting XSS vulnerabilities in EMC Documentum Web Development Kit WDK before 6.8 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3764
Cross-site scripting XSS vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563...
CVE-2014-3764
Cross-site scripting XSS vulnerability in the web-based device management interface in Palo Alto Networks PAN-OS before 5.0.15, 5.1.x before 5.1.10, and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Ref ID 64563...
CVE-2014-9526
Multiple cross-site scripting XSS vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gName parameter in singlepages/dashboard/users/groups/bulkupdate.php or 2 instanceid parameter in tools/dashboard/sitemapdragrequest.p...
CVE-2014-9522
Multiple cross-site scripting XSS vulnerabilities in CMS Papoo Light 6.0.0 Rev 4701 allow remote attackers to inject arbitrary web script or HTML via the 1 author field to guestbook.php or 2 username field to account.php...
Serendipity HTML Injection Vulnerability
Serendipity is a PHP-powered Weblog application. Serendipity suffers from an HTML injection vulnerability because it fails to filter user-supplied input. Allowing an attacker to run supplied HTML or JavaScript code in the context of the affected site...
Cross site scripting
Cross-site scripting XSS vulnerability in controllers/homecontroller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index...
CVE-2010-5314
CVE-2010-5314 affects BEdita before 3.1, where an XSS vulnerability exists in controllers/home_controller.php. An attacker can inject arbitrary web script or HTML via the searchstring parameter to news/index. The public-documented impact is remote script/HTML injection, with likely partial integr...
Cross site scripting
Cross-site scripting XSS vulnerability in the Frontend Uploader plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the errorsfu-disallowed-mime-type0name parameter to the default URI...
CVE-2014-9439
Cross-site scripting XSS vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not properly handled by forum.ghp...
CVE-2014-9434
CVE-2014-9434 describes a cross-site scripting (XSS) vulnerability in the Absolut Engine 1.73 administrative backend, specifically in the file path admin/managerrelated.php. The issue allows remote authenticated users to inject arbitrary web script or HTML through the title parameter. The connect...