Recruit plugin cross-site request forgery vulnerability

Recruit plugin for baserCMS is a job listing plugin for baserCMS. A cross-site request forgery vulnerability exists in Recruit plugin for baserCMS versions prior to 0.9.3, which allows remote attackers to hijack administrars authentication...

Yeager Cross-Site Scripting Vulnerability

Yeager is an open source content management system . Yeager suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious...

Websvn Cross-Site Scripting Vulnerability

WebSVN is a set of web-based Subversion Repository browsers that allow you to view logs of files or folders, see a list of changes to files, add or remove arbitrary version numbers, and more. A cross-site scripting vulnerability exists in WebSVN, which allows remote attackers to exploit the...

Apache Tomcat Session Fixation Vulnerability (CNVD-2016-01381)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat has a security vulnerability in the implementation of the requestedSessionSSL field, which can be exploited by an attacker to hijack an arbitrary session and gain access to the affected application...

Enhancesoft osTicket Session Fixation Vulnerability

Enhancesoft osTicket is a free and lightweight PHP-based question return system from Enhancesoft, USA. The system supports e-mail queries and more. A session fixation vulnerability exists in Enhancesoft osTicket. An attacker can vulnerability hijack a session to perform unauthorized access...

Cisco Jabber Guest Server HTTP HOST Parameter Cross-Site Scripting Vulnerability

Cisco Jabber Guest is a consumer-to-business C2B solution. A cross-site scripting vulnerability in Cisco Jabber Guest's handling of the HTTP HOST parameter allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

ASUS RT-N56U HTML Injection Vulnerability

ASUS RT-N56U is a wireless router product from ASUS. The ASUS RT-N56U suffers from an HTML injection vulnerability, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Ipswitch MOVEit Mobile Cross-Site Scripting Vulnerability

Ipswitch MOVEit An automated file transfer system from Ipswitch USA. A cross-site scripting vulnerability exists in Ipswitch MOVEit Mobile, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-00891)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site scripting vulnerability exists in phpMyAdmin, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00966)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

WordPress eshop plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. eShop is one of the online store plugins. A cross-site scripting vulnerability exists in the WordPress eshop plugin, which allows remote attackers to exploit the vulnerability to inject...

EClinicalWorks Population Health Client Portal Cross-Site Scripting Vulnerability

EClinicalWorks Population Health is a suite of population health solutions from EClinicalWorks, Inc. that provides dashboard analytics, patient appointment scheduling, care planning, and a secure network for patient referrals, among other features.Client Portal is one of these portals. A cross-si...

Ruby on Rails rails-html-sanitizer cross-site scripting vulnerability (CNVD-2016-00964)

Ruby on Rails is Rails core team to develop and maintain a set of open source Ruby-based Web application framework . rails-html-sanitizer is one of the HTML code cleanup package . Ruby on Rails rails-html-sanitizer has a cross-site scripting vulnerability that can be exploited by remote attackers...

Mapbox Mapbox.js HTML Injection Vulnerability

Mapbox Mapbox.js is a JavaScript plugin for quickly creating maps. An HTML injection vulnerability exists in Mapbox Mapbox.js, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

KDDI HOME SPOT CUBE devices cross-site scripting vulnerability

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A cross-site scripting vulnerability exists in KDDI HOME SPOT CUBE 2, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2016-00827)

Cisco Unity Connection is a voice messaging platform. A cross-site scripting vulnerability exists in Cisco Unity Connection, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user session...

phpMyAdmin cross-site scripting vulnerability (CNVD-2016-00797)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site scripting vulnerability exists in phpMyAdmin, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive...

IBM InfoSphere Data Architect Cross-Site Scripting Vulnerability

IBM Rational Software Architect is a suite of software development platforms.Rational Software Architect for WebSphere Software is a suite of development platforms for designing, developing, and optimizing IBM WebSphere applications.InfoSphere Rational Software Architect for WebSphere Software is...