CVE-2015-2989

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

CVE-2015-2989: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

PT-2015-6034

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Twit BBS affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the imagetitle parameter in the "index.php" file. This could...

phpcms v9 /modules/phpsso/index.php SQL注入漏洞

No description provided by source...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

CVE-2015-6809: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cfgprojectName parameter to index.php/admin/saveConfig, the 2 datastatsproviderurl parameter to index.php/areas/saveArea, or the 3 datadescription...

PT-2015-7365

Name of the Vulnerable Software and Affected Versions BEdita versions prior to 3.6.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the cfgprojectName parameter to "index.php/admin/saveConfig", the datastats provider url parameter to...

CVE-2015-2872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web...

PT-2015-5953

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector DDI versions prior to 3.5.1477 Trend Micro Deep Discovery Inspector DDI versions 3.6.x prior to 3.6.1217 Trend Micro Deep Discovery Inspector DDI versions 3.7.x prior to 3.7.1248 Trend Micro Deep Discovery...

CVE-2015-6513: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the J2Store comj2store extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 manufacturerids parameter to index.php...

PT-2015-7277

Name of the Vulnerable Software and Affected Versions J2Store com j2store extension for Joomla! versions prior to 3.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sortby or manufacturer ids parameter to the "index.php" endpoint...

BizIdea Design CMS 2015Q3 SQL Injection Vulnerability

BizIdea Design CMS 2015Q3 suffers from a remote SQL injection vulnerability. Document Title: =============== bizidea Design CMS 2015Q3 - SQL Injection Vulnerability Product & Service Introduction: =============================== http://www.bizidea.co.th Technical Details & Description:...

ektoplazm.com XSS vulnerability

Vulnerable URL: http://www.ektoplazm.com/index.php?s=x'"...

banggood.com XSS vulnerability

Vulnerable URL: http://www.banggood.com/index.php?com=indexid=undefined=loadLangNavs=http://www.banggood.com/buy/'"...

CVE-2015-5521

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

CVE-2015-5521

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

CVE-2015-5519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php...

CVE-2015-5521: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...