2332 matches found
CVE-2018-10364
BigTree before 4.2.22 has XSS in the Users management page via the name or company field...
Allok Video to DVD Burner 2.6.1217 - Buffer Overflow (SEH) Exploit
Exploit for windows platform in category local exploits Exploit Title: Buffer OverflowSEH on Allok Video to DVD Burner2.6.1217 Exploit Author:T3jv1l Vendor Homepage:http://www.alloksoft.com/ Software: www.alloksoft.com/allokdvdburner.exe Category:Local Contact:https://twitter.com/T3jv1l Version:...
Zoho ManageEngine Desktop Central Directory Traversal Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A directory traversal...
CVE-2018-5337
An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPTNAME field when modifying existing scripts...
CVE-2018-10118
Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php...
Cross site scripting
Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php...
Monstra CMS Cross-Site Scripting Vulnerability (CNVD-2018-08254)
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A cross-site scripting vulnerability exists in Monstra CMS version 3.0.4. A remote attacker can exploit the...
CVE-2018-10118
Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php...
CVE-2018-10118
Monstra CMS 3.0.4 is affected by a Stored XSS in the Name field on the Create New Page screen (admin/index.php?id=pages), related to plugins/box/pages/pages.admin.php. This CVE details the vulnerable component path and the input point that leads to script execution. The connected data confirms th...
CVE-2018-6935
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
Design/Logic Flaw
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
CVE-2018-6935
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
CVE-2018-6904
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6935
CVE-2018-6935 affects PHP Scripts Mall Student Profile Management System Script v2.0.6, where an XSS vulnerability exists in the Name field of list_student.php. The available records confirm the vulnerability exists but do not provide exploitation details, affected product build numbers beyond v2...
CVE-2018-6935
PHP Scripts Mall Student Profile Management System Script v2.0.6 has XSS via the Name field to liststudent.php...
CVE-2018-6900
PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page...
Coship RT3052 Cross-Site Scripting Vulnerability
Coship RT3052 is a wireless router product from Coship, China. A cross-site scripting vulnerability exists in the Coship RT3052 version 4.0.0.48. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via a specially crafted SSID field on the Wireless Settin...