Cross site scripting

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2123

CVE-2017-2123 is a cross-site scripting (CWE‑79) vulnerability affecting OneThird CMS v1.73 Heaven’s Door and earlier, exploitable via language.php to execute arbitrary scripts in a user’s browser. Public sources (JVN/JVNDB, NVD) confirm the impact as arbitrary script execution and recommend upda...

CVE-2017-2124

The CVE-2017-2124 entry affects OneThird CMS v1.73 Heaven’s Door and earlier. A cross-site scripting vulnerability exists in contact.php, allowing remote attackers to inject arbitrary web script or HTML via a crafted inquiry form submission. The root cause is improper handling in the inquiry form...

CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2123

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the language selection screen. Note that this vulnerability is different from JVN13003724. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this...

JVN#49408248: OneThird CMS vulnerable to cross-site scripting

OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the language selection screen. Impact An arbitrary script may be executed on the user's web browser. Solution For the users who have installed OneThird CMS already: Update th...

JVN#13003724: OneThird CMS vulnerable to cross-site scripting

OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the Software Update to the latest version according to the...