Microsoft Exchange Server Error Message Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of error messages, which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user,...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2015-01716)

IBM Rational Team Concert is a collaboration and development solution. An input validation vulnerability exists in IBM Rational Team Concert. A remote attacker can exploit the vulnerability to construct a malicious URI and trick a user into parsing it, which could result in obtaining a sensitive...

IBM WebSphere Cross-Site Scripting Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which can be exploited by a remote attacker to construct maliciou...

Ultimate PHP Board (UPB) Cross-Site Scripting Vulnerability

Ultimate PHP Board is a forum program. A cross-site scripting vulnerability exists in Ultimate PHP Board, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Webshop hun Cross-Site Scripting Vulnerability

Webshop hun is a WEB-based application. Webshop hun suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

WordPress 'Max Banner Ads' Plugin Cross-Site Scripting Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. WordPress "Max Banner Ads" has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs, trick users into parsin...

Cross-site scripting vulnerability in tcllib'::html::textarea' function

tcllib is a collection of packages for the Tcl programming language, distributed as both source code and precompiled binaries, and supporting a wide range of common operating systems: Windows, BSD, Unix, and Linux. A cross-site scripting vulnerability exists in the tcllib '::html::textarea'...

CVE-2015-2083

Cross-site request forgery CSRF vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requests that add a value to a profile field via a profilefields request to admin.php...

Drupal Navigate module cross-site scripting vulnerability

Drupal is an open source content management platform. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit this vulnerability to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain...

IBM Tivoli Endpoint Manager Web Reports Component Cross-Site Scripting Vulnerability

IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. A cross-site scripting vulnerability in the Web Reports component of IBM Tivoli Endpoint Manager version 9.1.1229 prior to 9.1 can be exploited b...

Drupal Panopoly Magic Module Cross-Site Scripting Vulnerability

Drupal is an open source content management platform. A cross-site scripting vulnerability exists in Drupal Panopoly Magic Module, which allows remote attackers to exploit this vulnerability to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive...

Cosmoshop 'index.cgi' Cross-Site Scripting Vulnerability

Cosmoshop is an online store application. A cross-site scripting vulnerability exists in Cosmoshop 'index.cgi', which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain sensitive cookies, hijack sessions,...

vBulletin Forum Component 'forum/help' Page Cross-Site Scripting Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . Forum is one of the forum components . A cross-site scripting vulnerability exists in vBulletin, which allows remote attackers to exploit the vulnerability ...

Multiple Cross-Site Scripting Vulnerabilities in Cit-e-Net Cit-e-Access

Cit-e-Net Cit-e-Access is a WEB-based application. Cit-e-Net Cit-e-Access has multiple cross-site scripts, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability

The Cisco Web Security Appliance is a secure Web gateway that integrates malware protection, application visualization control, policy control, and more in one platform. A cross-site scripting vulnerability exists in the Cisco Web Security Appliance, which allows remote attackers to exploit this...

IBM Tivoli Endpoint Manager HTML Injection Vulnerability

IBM Tivoli Endpoint Manager provides a unified, real-time visualization and implementation approach to deploying and managing patches to all endpoints. IBM Tivoli Endpoint Manager failed to properly filter user-submitted input, allowing remote attackers to exploit vulnerabilities to inject...

ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set

It was found that the oVirt web admin interface did not include the HttpOnly flag when setting session IDs with the Set-Cookie header. This flaw could make it is easier for a remote attacker to hijack an oVirt web admin session by leveraging a cross-site scripting XSS vulnerability...

Unspecified Cross-Site Scripting Vulnerability in PerlTreeBBS

PerlTreeBBS is a BBS application. PerlTreeBBS suffers from an unspecified cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs, trick users into parsing them, obtain sensitive cookies, hijack sessions, or perform malicious operations on the clie...

WordPress Plugin Easing Slider Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server to set up their own weblog . WordPress Easing Slider Plugin is a wordpress-based plugin . WordPress Easing Slider Plugin has multiple cross-site scripting vulnerabilities that can...

Multiple Cross-Site Scripting Vulnerabilities in Apache ActiveMQ

Apache ActiveMQ is an open source message bus that supports JMS1.1 and J2EE 1.4 specification of the JMS Provider implementation . Apache ActiveMQ WEB-based management console multiple instances of cross-site scripting vulnerabilities , remote attackers can exploit the vulnerability to build...