CVE-2018-18373: Improper Neutralization of Input During Web Page Generation

In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file upload areas in the Chat and Help Desk sections via the msg parameter in a /wp-admin/admin-ajax.php sbajaxaddmessage action...

DedeCMS Cross-Site Scripting Vulnerability (CNVD-2018-19871)

DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /plus/feedbackajax.php file in DedeCMS version 5.7 SP2, which can be exploited by remote attackers to execute JavaScript code with the help of the onhashchange attribute in the 'msg'...

CVE-2018-16786: Improper Neutralization of Input During Web Page Generation

DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

PT-2015-5935

Name of the Vulnerable Software and Affected Versions ANTlabs InnGate firmware versions on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrar...

CVE-2015-2850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2011-5297

Multiple cross-site scripting XSS vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter to default.php or 2 the username parameter to chatform.php...

PT-2015-3493

Name of the Vulnerable Software and Affected Versions TTChat version 1.0.4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited via...

CVE-2011-5297: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter to default.php or 2 the username parameter to chatform.php...

CVE-2014-5259

Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2014-5259: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

PT-2014-6373

Name of the Vulnerable Software and Affected Versions BlackCat CMS versions 1.0.3 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the msg parameter in the cattranslate.php file of the CatTranslate...

Cross site scripting

Cross-site scripting XSS vulnerability in oleggo-twitter/twitterloginform.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

PT-2014-5963

Name of the Vulnerable Software and Affected Versions Oleggo LiveStream plugin versions 0.2.6 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the msg parameter in the twitter login...

CVE-2014-4540: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in oleggo-twitter/twitterloginform.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2014-4596: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 msg or 2 act parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 xss parameter in an allow action to rss.php, 2 msg parameter to end-user/errdoc.php, 3 h parameter to end-user/ftpredirect.php, or 4...

PT-2014-4022

Name of the Vulnerable Software and Affected Versions Telligent Evolution versions prior to 6.1.19.36103 Telligent Evolution versions 7.x prior to 7.1.12.36162 Telligent Evolution versions 7.5.x Telligent Evolution versions 7.6.x prior to 7.6.7.36651 Description A cross-site scripting XSS issue...

CVE-2014-1223: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtain...

Sql injection

Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the 1 name and 2 msg parameters. NOTE: some of these details are obtained from third party information...