Drupal Migrate Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language.Migrate is a module used to port content from other CMSs to Drupal's framework. A cross-site scripting vulnerability exists in the Drupal Migrate module, which allows remote attackers to exploit the vulnerabilit...

Zend zend-diactoros has multiple vulnerabilities

Zend Framework is a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services . zend-diactoros is an implementation of PSR-7 HTTP messages . A cross-site scripting vulnerability and an open redirection vulnerability exists in Zend...

Pivotx Session Fixation Vulnerability

Pivotx is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. A session fixation vulnerability exists in the fileupload.php file in Pivotx versions prior to 2.3.11. A remote attacker can exploit this...

CVE-2015-5458

Session fixation vulnerability in fileupload.php in PivotX before 2.3.11 allows remote attackers to hijack web sessions via the sess parameter...

CVE-2015-0544

EMC Secure Remote Services Virtual Edition (ESRS VE) before 3.06 is affected by insufficient randomness in session cookie generation, enabling potential session hijacking. Affected versions include ESRS VE 3.02–3.04; EMC released 3.06 to address this issue. The vulnerability is documented as a hi...

Beaker Incorrect Label Escape Vulnerability

Beaker is a suite of open source software used to manage and automate test computers in laboratories. Beaker fails to properly escape tags in the search bar when generating JSON, allowing remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can obtain sensitive...

ECE Projects 'tx_solr[q]' Parameter Cross-Site Scripting Vulnerability

ECE Projects is a project management application. ECE Projects handles a cross-site scripting vulnerability in the 'txsolrq' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or...

Beaker HTML Injection Vulnerability

Beaker is a suite of open source software used to manage and automate test computers in laboratories. Beaker in the processing of "edit comment" in the data lack of correct HTML escaping , allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code , when...

WSO2 Identity Server Cross-Site Scripting Vulnerability

WSO2 Identity Server is an open source identity service that supports Information Cards, OpenID and XACML identity frameworks. WSO2 Identity Server suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

AudioShare Cross-Site Scripting Vulnerability

AudioShare is an audio file manager. The AudioShare forgot.php script fails to properly handle the 'email' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions whe...

Drupal Inline Entity Form Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Inline Entity Form module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

JSON 'ActiveSupport::JSON.encode()' function cross-site scripting vulnerability

JSON is a lightweight data exchange language , it is a subset of Javascript , and the use of completely language-independent text format . A cross-site scripting vulnerability exists in JSON, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing...

GarrettCom Magnum 6K and 10K Switches Cross-Site Scripting Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A cross-site scripting vulnerability exists in GarrettCom Magnum 6K and 10K Switches, which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to...

Adobe Connect 'admin/home/homepage/search' Cross-Site Scripting Vulnerability

Adobe Connect is an enterprise web conferencing solution. A cross-site scripting vulnerability exists in Adobe Connect, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions whe...

RSA Validation Manager 'displayMode' and 'wrapPreDisplayMode' Cross-Site Scripting Vulnerabilities

RSA Validation Manager is a validation program for RSA. The RSA Validation Manager user interface fails to properly handle the 'displayMode' and 'wrapPreDisplayMode' parameters, allowing remote attackers to exploit vulnerabilities by injecting malicious script or HTML code that can be used to gai...

TYPO3 BE User Log Extension Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system, BE User Log is a user login extension plugin. TYPO3 BE User Log has a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Novell ZENworks Mobile Management Cross-Site Scripting Vulnerability

Novell ZENworks Mobile Management is a mobile device management solution. A cross-site scripting vulnerability in the Novell ZENworks Mobile Management login form allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data,...

Alcatel-Lucent OmniSwitch security vulnerabilities

Crossite scripting, session hijack...

WordPress Backup to Dropbox plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress Backup to Dropbox is a plugin for backing up data to Dropbox. A cross-site scripting vulnerability exists in the WordPress Backup to Dropbox...

CUPS Sample Engine Cross-Site Scripting Vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A cross-site scripting vulnerability exists in the CUPS sample engine, which allows remote attackers ...