CVE-2017-14622: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter or 2 kbAction parameter in the kbAmz page to wp-admin/admin.php...

Harbin Fengteng E-commerce Co., Ltd. SQL injection vulnerability exists in class_id parameter of pic.php page of Fengteng E-commerce station building system.

Fengteng e-commerce website building system is a website building system. Harbin Fengteng E-commerce Co., Ltd. fengteng e-commerce station building system pic.php page classid parameter SQL injection vulnerability, an attacker can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in JYmusic UserController.class.php page s parameter

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic UserController.class.php page s parameter. A remote attacker can exploit the vulnerability to obtain sensitive database information...

PT-2017-3787 · Mitel · Shoretel Connect Onsite

Name of the Vulnerable Software and Affected Versions: ShoreTel Connect ONSITE version 18.82.2000.0 Description: A reflected Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the page parameter. This is related to the lack of protection measures for...

CVE-2017-9452

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

PT-2017-18931

Name of the Vulnerable Software and Affected Versions Piwigo versions 2.9.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the "admin.php" file. Recommendations For versions 2.9.0 and earlier, updat...

CVE-2017-9452: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Piwigo cross-site scripting vulnerability (CNVD-2017-08783 )

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in the admin.php file in Piwigo 2.9.0 and earlier versions. A remote attacker...

Zen Cart Cross-Site Scripting Vulnerability (CNVD-2017-08298)

Zen Cart is an open source shopping cart system developed by Zen Cart team. The system is mainly used to establish an online store , can support a variety of payment methods , multi-language options , online shopping mall batch update and so on. A cross-site scripting vulnerability exists in the...

CVE-2017-8833

Zen Cart 1.6.0 has XSS in the mainpage parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."...

Cross site scripting

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2016-7841

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2016-7841

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter...

PT-2017-9392

Name of the Vulnerable Software and Affected Versions Olive Diary DX affected versions not specified Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the page parameter. This could potentially lead to unauthorized actions on the affected...

CVE-2016-7841: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter...

AuroMeera Technometrix Pvt Cross-Site Scripting Vulnerability

eMLi is a comprehensive education management suite from AuroMeera Technometrix Pvt for educational institutions in India and globally. A cross-site scripting vulnerability in core-eMLi of AuroMeera Technometrix Pvt's eMLi allows an attacker to send malicious code as a browser-side script to...

CVE-2017-7621

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/studentportal/home.php. The affected versions are eMLi...

PT-2017-17849

Name of the Vulnerable Software and Affected Versions AuroMeera Technometrix Pvt. Ltd. eMLi versions 1.0 Description The issue allows an attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the "page" parameter to "code/student...

CVE-2017-7621: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/studentportal/home.php. The affected versions are eMLi...

SemCms /semcms/view.php page ID parameter has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms using php and vb language writing, combined with apache or iis running. SemCms /semcms/view.php page ID...