4094 matches found
The vulnerability of the templateSelect.xhtml component in the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the templateSelect.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with the parameter beanName...
Design/Logic Flaw
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...
CVE-2017-9425
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...
CVE-2017-9425
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...
Facetag Cross-Site Scripting Vulnerability
Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Facetag extension is one of the face tagging plugins. A cross-site scripting vulnerability exists in version 0.0.3 of the Piwigo Facetag...
CVE-2017-9425: Improper Neutralization of Input During Web Page Generation
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...
PT-2018-8509
Name of the Vulnerable Software and Affected Versions Facetag extension version 0.0.3 Description The issue allows for XSS via the name parameter to "ws.php" in a "facetag.changeTag" action. Recommendations For Facetag extension version 0.0.3, avoid using the name parameter in the "ws.php" endpoi...
CVE-2018-5992
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
CVE-2018-5992: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request...
PT-2018-17278
Name of the Vulnerable Software and Affected Versions: Joomla! Staff Master component through version 1.0 RC 1 Description: The issue exists due to SQL Injection in the Staff Master component for Joomla!. This occurs via the name parameter in a "view=staff" request. Recommendations: For Joomla!...
CVE-2017-9414: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...
PT-2018-8507
Name of the Vulnerable Software and Affected Versions Subsonic version 6.1.1 Description A cross-site request forgery CSRF issue exists in the Subscribe to Podcast feature, allowing remote attackers to hijack the authentication of victims for requests that conduct cross-site scripting XSS attacks...
SugarCRM Cross-Site Scripting Vulnerability (CNVD-2018-03248)
SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A cross-site...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01214)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the index.php holidayname parameter in the editholiday operation...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01395)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the LastName parameter in the index.php?user=ajax request...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01399)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited to conduct a cross-site scripting attack via the expensename parameter in the...