2332 matches found
CVE-2019-7545
In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...
Cross site scripting
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console console.php because proper filtration is omitted. This relates to the index.php?view=monitor Host Name...
PT-2019-18531 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Self-Stored Cross Site Scripting XSS issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable Host parameter value in the view console console.php, specifically...
ATutor cross-site scripting vulnerability (CNVD-2019-03592)
ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. A cross-site scripting vulnerability exists in Atutor 2.2.4 and earlier versions. A remote attacker can...
CVE-2019-7172
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...
Cacti Cross-Site Scripting Vulnerability (CNVD-2019-14550)
Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. A cross-site scripting vulnerability in the 'Name' field of the colortemplates.php file in versions of Cacti prior to 1.2.0, which stems from the program's...
CVE-2018-20723
A cross-site scripting XSS vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color...
DEBIAN-CVE-2018-20723
A cross-site scripting XSS vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color...
UBUNTU-CVE-2018-20723
A cross-site scripting XSS vulnerability exists in colortemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Name field for a Color...
CUBA Platform Reporting Addon Cross-Site Scripting Vulnerability
CUBA Platform is an open source Java Web framework for enterprise applications . Reporting Addon aka Reports Addon is one of the reporting addon . A cross-site scripting vulnerability exists in Reporting Addon in CUBA Platform 6.10.x and earlier versions 2019-01-02 and earlier. A remote attacker...
NBMonitor Network Bandwidth Monitor 1.6.5.0 - 'Name' Denial of Service (PoC)
Exploit Title: NBMonitor Network Bandwidth Monitor 1.6.5.0 - 'Name' Denial of Service PoC Author: Luis Martinez Date: 2018-12-27 Vendor Homepage: www.nsauditor.com Software Link : http://www.nbmonitor.com/downloads/nbmonitorsetup.exe Tested Version: 1.6.5.0 Vulnerability Type: Denial of Service D...
Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-26649)
Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5, which can be exploited by remote...
Design/Logic Flaw
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20448
Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI...
CVE-2018-20368
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
CVE-2018-1000847
FreshDNS version 1.0.3 and prior contains a Cross Site Scripting XSS vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session. This attack appear to be exploitable via The attacker stores a specially crafted string as their Ful...
ZOHO ManageEngine ADAudit Denial of Service Vulnerability
ZOHO ManageEngine ADAudit is a window Active Directory real-time auditing system from ZOHO USA. The system is capable of monitoring or auditing critical resources such as domain controllers in a network in real time. A denial of service vulnerability exists in ZOHO ManageEngine ADAudit versions...