251 matches found
CVE-2019-12362
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php...
PT-2019-12764
Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5.0 Description The issue allows for XSS via the HTTP Referer header to the "e/member/doaction.php" endpoint. Recommendations For EmpireCMS version 7.5.0, update to a version that fixes this issue, or as a temporary...
CVE-2019-12362: Improper Neutralization of Input During Web Page Generation
EmpireCMS 7.5.0 has XSS via the HTTP Referer header to e/member/doaction.php...
Cross site scripting
The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...
Cross site scripting
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
CVE-2018-18244
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
CVE-2018-18244
The CVE-2018-18244 entry corresponds to a cross-site scripting vulnerability in VIVOTEK Network Camera Series. The affected component is the syslog.html page, exploitable on firmware versions 0x06x to 0x08x. An attacker can remotely inject and execute arbitrary JavaScript in the context of a user...
CVE-2018-18244: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in syslog.html in VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header...
PT-2019-9558
Name of the Vulnerable Software and Affected Versions VIVOTEK Network Camera Series products with firmware 0x06x to 0x08x Description The issue allows remote attackers to execute arbitrary JavaScript code via an HTTP Referer Header, which is a result of cross-site scripting in the syslog.html fil...
PT-2019-11148
Name of the Vulnerable Software and Affected Versions: Technicolor MediaAccess TG789vac v2 HP version v16.3.7190-2761005-20161004084353 Description: The issue concerns the admin web interface, where unsanitized user input is displayed, allowing an unauthenticated malicious user to embed JavaScrip...
CVE-2018-8827: Improper Neutralization of Input During Web Page Generation
The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS...
CVE-2015-9273
CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...
CVE-2015-9273
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
PT-2018-4582
Name of the Vulnerable Software and Affected Versions wp-slimstat aka Slimstat Analytics versions prior to 4.1.6.1 Description The issue allows for XSS attacks through either an HTTP Referer header or a field associated with JavaScript-based Referer tracking. Recommendations For versions prior to...
CVE-2015-9273: Improper Neutralization of Input During Web Page Generation
The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...
Design/Logic Flaw
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
CVE-2018-17130
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
PT-2018-13911
Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue concerns a cross-site scripting XSS problem. It can be triggered via an HTTP Referer header in the member.php file. Recommendations For PHPMyWind version 5.5, update the member.php file to properly...
CVE-2018-17130: Improper Neutralization of Input During Web Page Generation
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,...
CVE-2018-14398
The CVE-2018-14398 entry affects Creme CRM 1.6.12: the cancel button’s value is sourced from the HTTP Referer header, enabling potential redirection to a fraudulent login page to steal credentials. Affected component: web UI logic handling cancel navigation; root cause: using Referer content in U...