BitTorrent Cross-Site Scripting Vulnerability

BitTorrent is a set of peer-to-peer file uploading and downloading software based on the BitTorrent protocol. BitTorrent suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Stored Cross-Site Scripting Vulnerability in Click Story App

Clicker Stories is an audiobook app for children. A stored cross-site scripting vulnerability exists in the Clicker Stories app. Allows an attacker to insert malicious scripts into input points where the vulnerability exists, to steal users' cookies or to realize phishing attacks...

VMware vRealize Log Insight Cross-Site Scripting Vulnerability

VMware vRealize Log Insight is a suite of log management and analysis tools. A cross-site scripting vulnerability in VMware vRealize Log Insight allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...

Arbitrary File Upload Vulnerability in New Harvest Technology Creative Portal Information Management System

Creative Portal Management System is a creative information publishing platform applied in the construction of New Harvest Technology. The New Harvest Technology Creative Portal Information Management System has an arbitrary file upload vulnerability that allows attackers to exploit the...

Virtual Freer Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in the 'qty' parameter on the 'irect.php ' page in Virtual Freer version 1.58, which allows attackers to inject their own malicious scripts...

Knight Talent System V3.7 Exists Storage-based Cross-site Scripting Vulnerability

Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. The system has a high implementation efficiency, free switching of templates, flexible background management functions and many other excellent features. Knight Talent System V3....

eFront Learning CMS Cross-Site Scripting Vulnerability

eFront is an online learning system. A cross-site scripting vulnerability exists in eFront. A remote attacker can exploit the vulnerability to inject malicious script code into the affected application...

WordPress Truemag Theme - Cross Site Scripting

The vulnerability is located in the "s" value of the page module GET method request. Because of this vulnerability remote attackers are able to inject own malicious script codes to the client-side of the online service web-application to compromise user session information or data. Solution Updat...

TYPO3 Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system. TYPO3 suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

BlackBerry Enterprise Service Cross-Site Scripting Vulnerability (CNVD-2016-02336)

BlackBerry Enterprise Server is a wireless solution. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A cross-site scripting vulnerability exists in BlackBerry Enterprise Server, which allows remote attackers to...

BlackBerry Enterprise Service Cross-Site Scripting Vulnerability (CNVD-2016-02337)

BlackBerry Enterprise Server is a wireless solution. The solution provides a unified architecture for mobile devices to access enterprise applications, wireless email communications. A cross-site scripting vulnerability exists in BlackBerry Enterprise Server, which allows remote attackers to...

WordPress ScoreMe Theme - Cross Site Scripting

Because of this vulnerability in the "s" value of the "index.php" file, remote attackers are able to inject own malicious script codes to the client-side of the affected web-application. Solution Update the theme...

WordPress External Links Plugin <= 1.80 - Multiple Cross Site Scripting

This vulnerability allows remote attackers to inject malicious script codes to the application-side of the vulnerable modules. Solution Update the plugin...

CactiEZ plugin weathermap arbitrary file write vulnerability

Cacti is a set of PHP, MySQL, SNMP and RRDTool based on the development of graphical analysis of network traffic monitoring tools.Weathermap is cacti in one of the most used plug-ins , you can use it to draw a network topology map . The CactiEZ plugin weathermap has an arbitrary file write...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Ipswitch MOVEit Mobile Cross-Site Scripting Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. A cross-site scripting vulnerability exists in Ipswitch MOVEit Mobile, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...