PHP Scripts Mall Lawyer Search Script Cross Site Scripting Vulnerability

PHP Scripts Mall Lawyer Search Script is a set of PHP based law firm management scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Lawyer Search Script version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

PHP Scripts Mall Bitcoin MLM Software Cross-Site Scripting Vulnerability

PHP Scripts Mall Bitcoin MLM Software is a PHP-based bitcoin management software from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Bitcoin MLM Software version 1.0.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2016-0344

Cross-site scripting XSS vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and 3.5 before 3.5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111785...

CVE-2018-7277

An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP...

CVE-2017-5810

A remote sql injection vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

CVE-2018-0513

Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Atlassian FishEye and Crucible Cross-Site Scripting Vulnerabilities (CNVD-2018-05475)

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in source browse resource in Atlassian FishEy...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

WordPress Splashing Images plugin <=2.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Nicolas Buzy-Debat in WordPress Splashing Images plugin versions =2.1. Possible remote injection of arbitrary web script or HTML via the search parameter to wp-admin/upload.php. Solution Update the WordPress Splashing Images plugin to the latest...

Sophos PureMessage for UNIX Cross-Site Scripting Vulnerability

Sophos PureMessage for UNIX is a Unix-based antivirus software from Sophos UK, which is designed to protect against viruses, spam, and other security threats that attack users by e-mail. A cross-site scripting vulnerability exists in versions of Sophos PureMessage prior to 6.3.2 for UNIX-based...

Formspree Cross-Site Scripting Vulnerability

Formspree is an open source tool for sending emails in web pages. A cross-site scripting vulnerability exists in the templates/forms/thanks.html page in versions of Formspree prior to 2018-01-23. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2016-6217

Cross-site scripting XSS vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Atlassian JIRA Cross-Site Scripting Vulnerability (CNVD-2018-03271)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace.PieChart gadget is one of the pie chart tools. A cross-site scripting vulnerability exists in the PieChart gadget in Atlassian Ji...

TorrentFlux Cross-Site Scripting Vulnerability

TorrentFlux is a PHP-based BitTorrent download client that manages all Torrent downloads through a convenient web interface. A cross-site scripting vulnerability exists in TorrentFlux version 2.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

LiveZilla knowledgebase.php file cross-site scripting vulnerability

LiveZilla is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A cross-site scripting vulnerability exists in the...

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01287)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01276)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in versions of ZCS prior to 8.8.0 Beta2. A remote attacker can exploit this vulnerability to inject...

DragonByte Technologies vBShout for vBulletin Cross-Site Scripting Vulnerability

DragonByte Technologies vBShout for vBulletin is a module with posting and replying functionality for vBulletin, the open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the vbshout.php file in DragonByte Technologies...

CVE-2012-6671

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...