CVE-2018-16456: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a keyword. NOTE: This may overlap with CVE-2018-6870 which has XSS via the Listings Search feature...

keyword-suggest-tool.com XSS vulnerability

Open Bug Bounty ID: OBB-677603 Description| Value ---|--- Affected Website:| keyword-suggest-tool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-16372

The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued...

CVE-2018-16371

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

Cross site scripting

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

CVE-2018-16371

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

CVE-2018-16371

CVE-2018-16371 affects PESCMS Team 2.2.1 and involves multiple reflected XSS via the keyword parameter in four endpoints: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=. The provided documents iden...

CVE-2018-16371: Improper Neutralization of Input During Web Page Generation

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

PT-2018-13525

Name of the Vulnerable Software and Affected Versions PESCMS Team version 2.2.1 Description The issue concerns multiple reflected XSS instances. These occur via the keyword parameter in several API endpoints: "g=Team&m=User&a=index&keyword=", "g=Team&m=User group&a=index&keyword=",...

CVE-2018-16371

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

CVE-2018-16371

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

internetmarketingninjas.com XSS vulnerability

Open Bug Bounty ID: OBB-669536 Description| Value ---|--- Affected Website:| internetmarketingninjas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500: Improper Neutralization of Input During Web Page Generation

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

PT-2018-12550

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the keyword parameter in the "manager/collect/collect vod zhuiju.php" endpoint. Recommendations For joyplus-cms version 1.6.0, avoi...

Insteon 2864-222 Buffer Overflow Vulnerability

Insteon HD IP Camera White 2864-222 is an IP camera product from Insteon USA. A buffer overflow vulnerability exists in the webService binary in Insteon HD IP Camera White 2864-222. An attacker can exploit this vulnerability to hijack the control flow with the help of a specially crafted usr...

bibutils Read Access Conflict Vulnerability

bibutils is a document format conversion tool. A security vulnerability exists in the 'isiinkeyword' function in the isiin.c file of the libbibutils.a file in bibutils 6.2 and earlier, which stems from a read access privilege conflict in the program. A remote attacker could exploit this...