Multiple cross-site scripting vulnerabilities in concrete5 private messages

Concrete5 is an open source content management software. Concrete5 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to exploit the vulnerabilities to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessio...

Drupal Imagefield Info Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Imagefield Info, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information...

WordPress Citizen Space Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Citizen Space plugin, which allows remote attackers to exploit the vulnerability to inject malicious...

WordPress Google Analytics by Yoast Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.Google Analytics by Yoast is one of the website analytics plugins. An HTML injection vulnerability exists in the WordPress Google Analytics by Yoast plugin, which allows remot...

WordPress The7 theme cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.WordPress The7 theme is a plugin based on wordpress themes. WordPress The7 theme suffers from a cross-site scripting vulnerability that allows remote attackers to...

Pligg CMS 'dmin_page.php' HTML Injection Vulnerability

Pligg CMS is a content management system. An input validation vulnerability exists in Pligg CMS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewe...

Drupal Petition Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Petition, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

WordPress WP Statistics Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress WP Statistics is a wordpress based statistics plugin. WordPress WP Statistics suffers from a cross-site scripting vulnerability that...

WSO2 Identity Server /carbon/user/change-passwd.jsp Cross-Site Scripting Vulnerability

WSO2 Identity Server is an open source identity services , support for Information Cards, OpenID and XACML. WSO2 Identity Server /carbon/user/change-passwd.jsp cross-site scripting vulnerability allows remote attackers to exploit the vulnerability by injecting malicious script or HTML code, which...

Cisco Secure Access Control Server Cross-Site Scripting Vulnerability

The Cisco Secure Access Control Server Solution Engine is a Cisco Secure Access Control Server solution engine. A cross-site scripting vulnerability exists in Cisco Secure Access Control Server, where the program fails to properly validate some parameters, which allows remote attackers to exploit...

Cisco Security Manager WEB Interface Cross-Site Scripting Vulnerability

Cisco Security Manager is enterprise-level management software for Cisco security products. A cross-site scripting vulnerability exists in the Cisco Security Manager WEB interface, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used ...

Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability

The Cisco Headend Digital Broadband Delivery System is a front-end broadband digital delivery system. A cross-site scripting vulnerability exists in the Cisco Headend Digital Broadband Delivery System. Because the program's WEB management interface fails to correctly filter user-submitted input, ...

WebODF Cross-Site Scripting Vulnerability

WebODF is an online viewing editor. WebODF suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions or perform malicious operations on t...

AlienVault OSSIM NBE import hostname/IP cross-site scripting vulnerability

AlienVault OSSIM or Open Source Security Information Management is a popular open source security management system. AlienVault OSSIM handles NBE imported hostname/ip with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious scripts or...

Oracle Business Intelligence Mobile HD for iOS mimeAttachmentHeaderName Cross-Site Scripting Vulnerability

Oracle Business Intelligence Suite Enterprise Plus is a comprehensive suite of enterprise BI products that provide a full range of BI capabilities, including interactive dashboards, fully on-the-fly proactive intelligence and alerting solutions.Oracle Business Intelligence Mobile HD for iOS is...

Feed2JS 'magpie_debug.php' Cross-Site Scripting Vulnerability

Feed2JS is the feed content to JS output , easy to embed in the page to make a list of articles . Feed2JS magpiedebug.php handles the url with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used ...

Unspecified cross-site scripting vulnerability in Nagios Business Process Intelligence (BPI) index.php

Nagios is an open source free network monitoring tool , can effectively monitor Windows, Linux and Unix host status , switches routers and other network settings , printers and so on. Nagios Business Process Intelligence index.php cross-site scripting vulnerability , allowing remote attackers to...

Grindr for iOS Multiple Parameter Handling Email Address Operation Vulnerability

Grindr for iOS is GPS based mobile app. An input validation vulnerability exists in Grindr for iOS that fails to properly filter the email and oldemail parameters, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to...

WordPress ClickBank Ads 1.7 CSRF / Cross Site Scripting

================================================================ CSRF/Stored XSS Vulnerability in ClickBank Ads V 1.7 Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in ClickBank Ads...

Fortinet FortiADC sslvpn login page cross-site scripting vulnerability

Fortinet FortiADC is a load balancing service solution. A cross-site scripting vulnerability exists in the Fortinet FortiADC sslvpn login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...