3343 matches found
SQL Injection Vulnerability in Name Parameter of VoIP Operation Support System of Kunshi Network Technology Co.
The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. A SQL injection vulnerability exists in the name parameter of the VoIP operation support system of Kunshi Network Technology Co. An attacker can exploit...
The vulnerability of the implementation of the getClass method in the CookieInterceptor class of the Apache Struts software framework allows a hacker to gain access to read, modify, or delete data.
The vulnerability of the CookieInterceptor class implementation in the Apache Struts software platform is related to deficiencies in access control when processing the cookiesName parameter with the symbol “”. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or...
Micro Focus Rumba stack buffer overflow vulnerability (CNVD-2016-04557)
Micro Focus Rumba is a terminal emulation solution using UI technology from Micro Focus UK. The solution supports users in accessing core applications from desktop, web and mobile devices. A stack buffer overflow vulnerability exists in the 'PlayMacro' function in the WdMacCtl.ocx file of Micro...
SQL Injection Vulnerability in the LoginName Parameter of the Collaboration Office System of Shanghai CITIC Information Development Co.
CITIC Shanghai Information Development Co., Ltd. collaborative office system is a set of online office automation software A SQL injection vulnerability exists in the loginName parameter of the CITIC Information Development Co., Ltd. collaborative office system, which can be exploited by an...
CVE-2016-4359
Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through...
Multiple Cross-Site Scripting Vulnerabilities in Fiyo CMS
Fiyo CMS is a content management system. Fiyo CMS fails to properly filter user-submitted "name" POST parameter data, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, obtaining sensitive cookies, hijacking sessions, or performing malicious...
Fiyo CMS Cross-Site Scripting Vulnerability (CNVD-2016-03509)
Fiyo CMS is a content management system. Fiyo CMS fails to properly filter user-submitted "name" POST parameter data, which allows remote attackers to execute arbitrary HTML and script code in the affected browsers...
CVE-2016-1596
Multiple cross-site scripting XSS vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain 1 user name, 2 tfaClientFirstName, 3 tfaClientLastName, 4 taselectedTopicContent, 5 tforgUnitName, 6...
CVE-2016-3968
Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...
CubeCart Stored Cross-Site Scripting Vulnerability
CubeCart is an open source PHP e-commerce software system. A stored cross-site scripting vulnerability exists in CubeCart. Due to insufficient filtering of user-supplied data via the "firstname" and "lastname" HTTP POST parameters passed to the "/index.php" script input, a remotely-authenticated...
Stored XSS in ViewWorkflowTransition.jsp
Step to reproduce: 1 Go to workflow edit page as an administrator 2 Add validator "User Permission Validator" to transition with user name parameter "alert2" 3 It will trigger xss on ViewWorkflowTransition page...
ILASIII 数字化图书管理系统 RdrRInforDetail.aspx 参数Name SQL注入漏洞
No description provided by source...
Synnefo Internet Management Software Cross-Site Scripting Vulnerability
Synnefo Internet Management Software IMS is a suite of network management software from Synnefo India. A cross-site scripting vulnerability exists in Synnefo IMS 2015 version of synnefoclient, which stems from the packagehistory/listusagesdata URI failing to adequately filter the 'planname '...
Synnefo Client Cross Site Scripting
Information ================================= Vulnerability type: Cross Site Scripting XSS Vendor: http://www.synnefoims.com/ Product: Synnefo Client for Synnefo Internet Management Software IMS 2015 http://www.synnefoims.com/products.html CVE Reference: =================================...
Role Scoper WordPress Plugin Reflective Cross-Site Scripting Vulnerability
Role Scoper WordPress plugin is comprehensive access control solution that controls read and edit permissions like a CMS. Role Scoper WordPress 1.3.66 and earlier versions do not effectively filter the "objectname" HTTP GET parameter value of "/wp-admin/admin.php" when "page" is set to...
OcProducts OcPortal 'FIELD_NAME' Parameter Cross-Site Scripting Vulnerability
OcProducts ocPortal is an open source PHP and MySQL based Content Management System CMS from OcProducts. A cross-site scripting vulnerability exists in OcProducts OcPortal. An attacker can exploit this vulnerability to execute arbitrary script code, steal cookie-based authentication and launch...
PT-2016-3297 · Gnu +3 · Gnu Tar +3
Name of the Vulnerable Software and Affected Versions: GNU tar versions 1.14 through 1.29 Description: The issue is related to a directory traversal vulnerability in the safer name suffix function. This vulnerability might allow remote attackers to bypass an intended protection mechanism and writ...
Information disclosure
The GetResource servlet in Pentaho Business Analytics BA Suite 4.5.x, 4.8.x, and 5.0.x through 5.2.x and Pentaho Data Integration PDI Suite 4.3.x, 4.4.x, and 5.0.x through 5.2.x does not restrict access to files in the pentaho-solutions/system folder, which allows remote attackers to obtain...
F5 Networks BIG-IP : BIG-IQ / BIG-IP privilege escalation vulnerability (K15229)
F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/authz/users/. CVE-2014-3220 Impact An authenticated user with limited access may be able to gain...
