PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Sensio Labs Symfony Session Fixation Vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A session fixation vulnerability exists in the 'Remember M...

Visual Paradigm Server 10.0 Cross Site Scripting Vulnerability

Visual Paradigm Server version 10.0 suffers from a cross site scripting vulnerability. ================================================================ Visual Paradigm Server v10.0 - Cross Site Scripting XSS ================================================================ Information...

Moodle cross-site scripting vulnerability (CNVD-2015-07727)

Moodle is a free, open source e-learning software platform. Moodle suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

DEBIAN-CVE-2015-7984

Multiple cross-site request forgery CSRF vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary 1 commands via the cmd paramet...

BlackBerry Enterprise Server Cross-Site Scripting Vulnerability

BlackBerry Enterprise Server is a component of the BlackBerry Enterprise Solution. An input validation vulnerability exists in the BlackBerry Enterprise Server management console, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used t...

Zeuscart 'index.php' Cross-Site Scripting Vulnerability

ZeusCart is an open source shopping system based on PHP and MySQL designed for small and medium-sized online stores. A cross-site scripting vulnerability exists in Zeuscart 'index.php', which allows remote attackers to exploit the vulnerability and inject malicious script or HTML code to obtain...

PHP Server Monitor has multiple vulnerabilities

PHP Server Monitor is a set of open source Web-based tools used to monitor servers and Web sites . PHP Server Monitor suffers from cross-site scripting and elevation of privilege vulnerabilities that could be exploited by remote attackers to elevate privileges or obtain sensitive information and...

Techno Project Japan Enisys Gw Cross-Site Scripting Vulnerability

Techno Project Japan Enisys Gw is an open source groupware software from Techno Project Japan. A cross-site scripting vulnerability exists in Techno Project Japan Enisys Gw. The vulnerability allows remote attackers to inject malicious script or HTML code that, when viewed with malicious data,...

Infinite Automation Mango Automation Cross-Site Request Forgery Vulnerability

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430, suffers from a...

TestLink 1.9.13 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : Cross-site Scripting Severity : Important Status :...

Web Reference Database Cross-Site Scripting Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. Multiple scripts in Web Reference Database fail to adequately filter multiple parameters, allowing remote attackers to exploit vulnerabilities t...

Fortinet FortiManager GUI Cross-Site Scripting Vulnerability

Fortinet FortiManager is a centralized device management application. A cross-site scripting vulnerability exists in the Fortinet FortiManager SOMVpnSSLPortalDialog and FGDMngUpdHistory functions, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

EMC RSA Archer GRC Cross-Site Scripting Vulnerability

EMC RSA Archer GRC is an enterprise IT governance and compliance governance product. EMC RSA Archer GRC suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...

Apache Struts Cross-Site Scripting Vulnerability (CNVD-2015-06370)

Apache Struts is an open source framework for creating enterprise Java Web applications. Apache Struts debug mode suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Splunk Cross-Site Scripting Vulnerability (CNVD-2015-06361)

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. Splunk suffers from a cross-site scripting vulnerability that allows remote attackers to...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2015-06294)

IBM Content Navigator is a Web client that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which allows remote attackers to exploit the vulnerability to inject maliciou...

IBM OpenPages GRC Platform Cross-Site Scripting Vulnerability (CNVD-2015-06298)

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site scripting vulnerability exists in IBM OpenPages GRC Platform, which allows remote attackers to exploit the vulnerability to inject malicious scri...

Aruba Networks Mobility Controller Cross-Site Scripting Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site scripting vulnerability in Aruba Networks Mobility Controller allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

KnowledgeTree 'login.php' Cross-Site Scripting Vulnerability

KnowledgeTree is a Web-based open source document management system . A cross-site scripting vulnerability exists in KnowledgeTree login.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...