WordPress Appointment Booking Calendar Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation, and Appointment Booking Calendar is one of the appointment calendar plugins. A cross-site scripting vulnerability exists in the cpabcappointmentsadminintbookingslist.inc.php script in...

Web Reference Database and bleeding-edge cross-site scripting vulnerabilities

Web Reference Database a.k.a. refbase is a web-based multi-user interface product developed by the refbase community to provide search tools and automated indexing for the management of scientific literature. bleeding-edge is a downloadable version. A cross-site scripting vulnerability exists in...

IBM Emptoris Supplier Lifecycle Management and Emptoris Program Management Cross-Site Scripting Vulnerabilities

IBM Emptoris Supplier Lifecycle Management is a suite of supply chain lifecycle management programs from IBM in the United States. A cross-site scripting vulnerability in IBM Emptoris Supplier Lifecycle Management and Emptoris Program Management allows remote attackers to inject arbitrary web...

Web Reference Database Cross-Site Scripting Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. Multiple scripts in Web Reference Database fail to adequately filter multiple parameters, allowing remote attackers to exploit vulnerabilities t...

Open-Xchange Server and Open-Xchange AppSuite Front End Cross-Site Scripting Vulnerabilities

Open-Xchange Server is a semi-open source project mainly used for developing collaboration software; OX AppSuite is a set of Web cloud desktop environment. A cross-site scripting vulnerability exists in the dialogs for printing content in the Front End of Open-Xchange Server and OX AppSuite, whic...

WordPress Gallery - Photo Albums - Portfolio plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Gallery - Photo Albums - Portfolio is a combination plugin for creating photo galleries, photo albums and rotating video and audio. A cross-site scripting...

Drupal CMS Updater Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP.CMS Updater module for Drupal is a module for Drupal that provides security protection for Drupal websites. A cross-site scripting vulnerability in the Drupal CMS Updater module 7.x-1.3 prior to version 7.x-1.x allows...

Cross-Site Scripting Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. login is one of the login module . A cross-site scripting vulnerability exists in the login module in Joomla! versions 3.4.4 and 3.4.x prior to Joomla! A remote attacker can exploit...

Citrix NetScaler ADC/NetScaler Gateway Cross-Site Scripting Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery.Citrix Access Gateway is a general purpose SSL VPN appliance. A cross-site scripting vulnerability exists in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions pri...

WordPress sourceAFRICA plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed in the PHP language, which supports personal blog sites on PHP and MySQL servers. sourceAFRICA is one of the plug-ins for the African Network of Centers for Investigative Reporting that allows journalists to...

Joomla! googleSearch (CSE) component cross-site scripting vulnerability

Joomla! is an open source content management system. googleSearch component for Joomla! is a custom search engine component for Joomla! A cross-site scripting vulnerability in googleSearch component 3.0.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the q paramet...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2015-05967)

Microsoft Exchange Server is a suite of e-mail service components from Microsoft. A cross-site scripting vulnerability exists in Microsoft Exchange Server 2013 Cumulative Update 8/9/SP1, Outlook Web Access OWA, which can be exploited by remote attackers to inject arbitrary web script or HTML via ...

OkCupid OKWS Cross-Site Scripting Vulnerability

OkCupid OKWS OK Web Server is a web server for creating web services. A security vulnerability exists in the libahttp/err.c file of OkCupid OKWS, which originates from a non-existent page that does not adequately filter the 'PATHINFO' value. A remote attacker could use this vulnerability to injec...

MediaWiki SemanticForms extension cross-site scripting vulnerability (CNVD-2015-05873)

MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...

MediaWiki SemanticForms Extended Cross-Site Scripting Vulnerability (CNVD-2015-05872 (CNVD-C-2015-47230))

MediaWiki is the United States Wikimedia Wikimedia Foundation and MediaWiki volunteers to develop and maintain a set of free and free Web-based Wiki engine , it can be used to deploy internal knowledge management and content management system . SemanticForms is one of the extensions used to creat...

Drupal Time Tracker module cross-site scripting vulnerability (CNVD-2015-05876)

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Time Tracker is one of the modules of the time tracking system. A cross-site scripting vulnerability exists in the Drupal Time Tracker module version 7.x-1.4 prior to 7.x-1.x. The...

WordPress MDC Private Message Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up a personal blog site . MDC Private Message is one of the plug-ins used to send private messages . A cross-site scripting vulnerability...

DEBIAN-CVE-2015-6730

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter, which is not properly handled in an error page, related to "ForeignAPI images."...

PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross Site Scripting Vulnerability

PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site scripting vulnerability exists in the jquery.lightbox-0.5.min.js file in PHP Kobo Photo Gallery CMS for PC,...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...