WordPress External Links Plugin <= 1.80 - Multiple Cross Site Scripting

This vulnerability allows remote attackers to inject malicious script codes to the application-side of the vulnerable modules. Solution Update the plugin...

CactiEZ plugin weathermap arbitrary file write vulnerability

Cacti is a set of PHP, MySQL, SNMP and RRDTool based on the development of graphical analysis of network traffic monitoring tools.Weathermap is cacti in one of the most used plug-ins , you can use it to draw a network topology map . The CactiEZ plugin weathermap has an arbitrary file write...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Ipswitch MOVEit Mobile Cross-Site Scripting Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. A cross-site scripting vulnerability exists in Ipswitch MOVEit Mobile, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability

Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Trend Micro Direct Pass -Persistent Web Vulnerability

Document Title: =============== Trend Micro Direct Pass -Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1712 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 1712...

Barracuda Networks SN #52 - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks SN 52 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1297 BNSEC ID: 0004001004 Tracking ID: CAS-03491-K1X2V0 Release Date: ============= 2016-02-03 Vulnerability Laborator...

IBM InfoSphere Data Architect Cross-Site Scripting Vulnerability

IBM Rational Software Architect is a suite of software development platforms.Rational Software Architect for WebSphere Software is a suite of development platforms for designing, developing, and optimizing IBM WebSphere applications.InfoSphere Rational Software Architect for WebSphere Software is...

OpenCart Cross-Site Scripting Vulnerability

OpenCart is an open source e-commerce system. The OpenCart index.php script fails to adequately filter the 'zoneid' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2015-08136)

IBM WebSphere Portal is a suite of enterprise portal software from IBM in the United States. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

SAP NetWeaver AS JAVA - XSS vulnerability

Application: SAP NetWeaver Portal 7.4 Vendor URL: SAP Bug: XSS Reported: 12.08.2015 Vendor response: 13.08.2015 Date of Public Advisory: 14.06.2016 Reference: SAP Security Note 2256178 Author: Vahagn VardanyanERPScan VULNERABILITY INFORMATION Class: XSS Impact: modify displayed content from a Web...

Angler Exploit Kit Spreading Cryptowall 4.0

As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...

MediaWiki cross-site scripting vulnerability (CNVD-2015-07394)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject malicious script or...

Cisco SocialMiner WeChat Page Cross-Site Scripting Vulnerability

A vulnerability in the WeChat page of Cisco Social Miner could allow an unauthenticated, remote attacker to send a malicious script to an unsuspecting user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by convincing the user of the...

mounteqshop.be XSS vulnerability

Vulnerable URL: http://www.mounteqshop.be/site/error.php?url=http%3A%2F%2Fwww.mounteqshop.be%2Fnl%2Fadvancedsearch.htm%3Faction%3Dsearch%26%253Ciframestyle%3D%26pagnr%3D1%26ppp%3Dalles=--!%3E%22%3E%3C/script%20%3E%3Ciframe/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|---...

Apache Struts Cross-Site Scripting Vulnerability (CNVD-2015-06370)

Apache Struts is an open source framework for creating enterprise Java Web applications. Apache Struts debug mode suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...