CVE-2019-0375

CVE-2019-0375 affects SAP BusinessObjects BI Platform (Web Intelligence HTML interface). The issue is caused by insufficient encoding of user-controlled inputs, allowing reflected Cross-Site Scripting via the export dialog box for report names in versions prior to 4.2 and 4.3. The connected docum...

LimeSurvey Reflective Cross-Site Scripting Vulnerability (CNVD-2019-31350)

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A reflective cross-site scripting vulnerability exists in application/core/SurveyCommonAction.php in versions prior to Limesurvey 3.17.14...

Limesurvey Reflective Cross-Site Scripting Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A reflective cross-site scripting vulnerability exists in versions prior to Limesurvey 3.17.14. A remote attacker can exploit this...

CVE-2019-7437

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...

Frog CMS 0.9.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...

Frog CMS 0.9.5 - Cross-Site Scripting

Frog CMS 0.9.5 - Cross-Site Scripting Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under...

Frog CMS 0.9.5 Cross Site Scripting

Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...

Frog CMS 0.9.5 - Cross-Site Scripting

Exploit Title: Frog CMS 0.9.5 - Cross-Site Scripting Date: 2018-12-25 Exploit Author:WangDudu Vendor Homepage: https://github.com/philippe/FrogCMS Software Link: https://github.com/philippe/FrogCMS Version:0.9.5 CVE :CVE-2018-20448 The parameter under /install/index.php is that the Database name...

CVE-2018-19774

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters...

CVE-2018-19774

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters...

CVE-2018-19774

CVE-2018-19774 affects InfoVista VistaPortal SE 5.1 (build 51029). The PresentSpace.jsp page is vulnerable to reflected Cross-Site Scripting via the GroupId and ConnPoolName parameters. According to NVD, the vulnerability has CVSS v3.0 base metrics: Network attack vector, Low attack complexity, N...

CVE-2018-19811

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19771

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter...

CVE-2018-12711

CVE-2018-12711 affects Joomla! language switcher module (versions 1.6.0–3.8.8). The issue is a reflective XSS caused by unescaped HTML characters in the current language link, which can be exploited to inject arbitrary parameters/values on the current page URL. The vulnerability is tied to the la...

CVE-2018-12711

An XSS issue was discovered in the language switcher module in Joomla! 1.6.0 through 3.8.8 before 3.8.9. In some cases, the link of the current language might contain unescaped HTML special characters. This may lead to reflective XSS via injection of arbitrary parameters and/or values on the...

OLX: Reflective XSS at olx.ph

Hello, I would like to report a reflective XSS at https://www.olx.ph. Steps to reproduce Visit the following link: https://www.olx.ph/all-results?q=car&utmsource=OptHomepageVar0&utmmedium=Search&utmcampaign=toto%27-alertdocument.domain-%27-%27 An XSS should pop-up F305078 Technical Details The...

Use the password reset functions to achieve account-hijacking-vulnerability warning-the black bar safety net

Recently, I attended a platform to invite vulnerability testing project, in which the discovery of a unique account hijacking vulnerability, the entire vulnerability discovery process very unexpected but also very lucky, by the password reset function can be achieved account hijacking, and I will...

CVE-2017-3964

McAfee Network Security Management (NSM) Web UI vulnerable to Reflective Cross-Site Scripting via a URL parameter. Affected product: NSM web interface (before 8.2.7.42.2). Cause: reflected XSS in the web interface. Impact: arbitrary web script/HTML injection. Remediation: upgrade to 8.2.7.42.2 or...

CVE-2017-3964 SB10192 - Network Security Management (NSM) - Reflective Cross-Site Scripting (XSS) vulnerability

Reflective Cross-Site Scripting XSS vulnerability in the web interface in McAfee Network Security Management NSM before 8.2.7.42.2 allows attackers to inject arbitrary web script or HTML via a URL parameter...

CVE-2017-16356

Reflected XSS in Kubik-Rubik SIGE aka Simple Image Gallery Extended before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/pluginsige/print.php link with a crafted img, name, or caption parameter...