Sitecore Cross-Site Scripting Vulnerability

Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A cross-site scripting vulnerability exists in Sitecore version 8.2, which stems from the...

MetInfo cross-site scripting vulnerability (CNVD-2017-25435)

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 5.3.17. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via Client-IP or X-Forwarded-For HTTP packet headers...

Biscom Secure File Transfer Cross-Site Scripting Vulnerability

Biscom Secure File Transfer SFT is a Web-based file transfer solution from Biscom USA. The solution has features such as file sharing, workspace creation and automatic file cleanup. A cross-site scripting vulnerability exists in the Package Name field in Biscom SFT. A remote attacker could exploi...

FineCMS stored cross-site scripting vulnerability (CNVD-2017-15721)

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework development for multiple terminals, including Pc-side web pages and mobile web pages, support for customized content models and member models, and can be customized fields, can be...

FineCMS Stored Cross-Site Scripting Vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework development for multiple terminals, including Pc-side web pages and mobile web pages, support for customized content models and member models, and can be customized fields, can be...

Joomla! cross-site scripting vulnerability (CNVD-2017-22326)

Joomla! CMS is a U.S. Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A cross-site scripting vulnerability exists in Joomla! CMS versions 1.7.3 to 3.7.2, which stems from a lack of cross-site...

Webmin cross-site scripting vulnerability (CNVD-2017-21737)

Webmin is a web-based system administration tool for Unix-like operating systems developed by Australian software developer Jamie Cameron and the Webmin community. A cross-site scripting vulnerability exists in versions of Webmin prior to 1.850. This vulnerability can be exploited by remote...

Synology Audio Station Cross-Site Scripting Vulnerability

Synology Audio Station is an audio manager from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Audio Station version 5.1 before 5.1-2550 and version 5.4 before 5.4-2857. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML wi...

CloudView NMS Cross-Site Scripting Vulnerability (CNVD-2017-12302)

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A cross-site scripting vulnerability exists in versions of CloudView NMS prior to 2.10a. A remote attacker can exploit this vulnerability to inject arbitra...

GetSimple CMS 'admin/profile.php' Cross-Site Scripting Vulnerability

Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the name field of the...

CloudView NMS Cross-Site Scripting Vulnerability

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A cross-site scripting vulnerability exists in CloudView NMS versions prior to 2.10a. A remote attacker can exploit this vulnerability to inject arbitrary...

CVE-2017-9624

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data...

CVE-2016-7817

Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cisco Email Security and Content Security Management Appliance Cross-Site Scripting Vulnerability

The Cisco Email Security Appliance is a suite of email security appliances.Cisco Content Security Management is a unified email and Web security management solution. A cross-site scripting vulnerability in the Cisco Email Security and Content Security Management Appliance allows remote attackers ...

Lansweeper Cross-Site Scripting Vulnerability

Lansweeper is a network-assisted software that lists Windows hardware from Lansweeper Belgium. A cross-site scripting vulnerability exists in the image retrieval URI in versions of Lansweeper prior to 6.0.0.65. A remote attacker could exploit this vulnerability to inject arbitrary web script or...

Bram Korsten Note Cross-Site Scripting Vulnerability

Bram Korsten Note is a lightweight php-based content management system developed by Dutch developer Bram Korsten. A cross-site scripting vulnerability exists in the note-source\ui\editor.php file in Bram Korsten Note 1.2.0 and earlier versions. A remote attacker can exploit this vulnerability to...

CVE-2017-9441

Multiple cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML by uploading a crafted package, triggering mishandling of the 1 title or 2 version or 3 authorname parameter in manifest.json. This issue exists ...

WordPress WP Live Chat Support Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers running PHP and MySQL.WP Live Chat Support is one of the components that supports live chat. A cross-site scripting vulnerability exists...

HPE Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. A remote attacker could exploit this vulnerability to inject arbitrary web...

Allen Disk Cross-Site Scripting Vulnerability

Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in Allen Disk version 1.6. A remote attacker can inject arbitrary web script or HTML by uploading a specially...