496 matches found
CVE-2018-16371: Improper Neutralization of Input During Web Page Generation
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
CVE-2018-16371
PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...
CVE-2018-14500
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...
CVE-2018-14500
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...
CVE-2018-14500
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...
CVE-2018-14500: Improper Neutralization of Input During Web Page Generation
joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...
joyplus-cms cross-site scripting vulnerability (CNVD-2018-08675)
joyplus-cms is an efficient video movie website management system built with PHPmysql. A cross-site scripting vulnerability exists in manager/adminvod.php in joyplus-cms 1.6.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the keyword parameter...
Design/Logic Flaw
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073
The CVE-2018-10073 entry applies to joyplus-cms 1.6.0, where a cross-site scripting vulnerability exists in manager/admin_vod.php via the keyword parameter. Root cause is improper handling of the keyword input leading to XSS. Documents state the affected software and vulnerable parameter but do n...
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
CVE-2018-10073: Improper Neutralization of Input During Web Page Generation
joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...
Design/Logic Flaw
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...