9592 matches found
Cross site scripting
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting...
CVE-2018-15679
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...
CVE-2018-15678
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting...
CVE-2018-13825
CA PPM includes a vulnerability in the gridExcelExport feature due to insufficient input validation, enabling reflected XSS. Affected versions: 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below. The root cause is input validation failures in that component; impact is remote e...
CVE-2018-6643
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter...
CVE-2018-6643
Infoblox NetMRI 7.1.1 is affected by a Reflected Cross-Site Scripting vulnerability (CVE-2018-6643). The issue arises via the /api/docs/index.php query parameter, allowing injection of arbitrary script/HTML into responses. Documented CVSS details indicate a network attack vector with user interac...
CVE-2018-15533
A reflected cross-site scripting vulnerability exists in Geutebrueck reporter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005...
CVE-2018-15533
A reflected cross-site scripting vulnerability exists in Geutebrueck reporter 16 before 7.8.974.20 by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005...
CVE-2018-15528
CVE-2018-15528 affects the Java System Solutions SSO plugin for BMC MyIT (version 4.0.13.1). The issue is a reflected XSS in the select_sso() function, where a victim loading a crafted /ux/jss-sso/arslogin?... link and pressing Login can cause client-side scripts to run. The vulnerability enables...
CVE-2018-15533
Geutebrueck re_porter 16 firmware versions prior to 7.8.974.20 contain a reflected cross-site scripting (XSS) vulnerability. The issue occurs by appending a query string to /modifychannel/exec or /images/.png on TCP port 12005, enabling an attacker to inject arbitrary web script into the affected...
CVE-2018-15169
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
CVE-2018-6590
CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerability...
CVE-2018-0408
A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...
CVE-2018-0408
A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...
Cisco Small Business 300 Series Managed Switches Authenticated Reflected Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...
Security Bulletin: IBM Cúram is susceptible to a Open Source CKEditor vulnerability (CVE-2014-5191).
Summary IBM Cúram Social Program Management is vulnerable to Reflected Cross-Site ScriptingXSS. This is caused by improper sanitization of user-supplied data in the Preview Plugin for CKEditor. Vulnerability Details CVE ID: CVE-2014-5191 The Preview Plugin for CKEditor is vulnerable to cross-site...
CVE-2018-1255 Reflected Cross-Site Scripting Vulnerability
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a...
CVE-2018-13039
OpenSID 18.06-pasca has reflected Cross Site Scripting XSS via the cari parameter, aka an index.php/first?cari= URI...
CVE-2018-0558
Cybozu Mailwise 5.0.0–5.4.1 contains a reflected cross-site scripting (CWE-79) vulnerability in System settings, enabling injection of arbitrary script or HTML and potential session-local impact. The issue is confirmed across multiple sources (CVE-2018-0558 and related records). Attack vectors ar...