PHPMyWind shoppingcart.php file cross-site scripting vulnerability

PHPMyWind is a set of PHP and MySQL-based, W3C-compliant enterprise website building solutions. A cross-site scripting vulnerability exists in the PHPMyWind shoppingcart.php file, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used...

IdentityServer3 authorize response page cross-site scripting vulnerability

IdentityServer3 is a .NET-based access control plug-in for Web applications. A cross-site scripting vulnerability in the Angular expression of the IdentityServer3 authorize response page allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be use...

Stored Cross-Site Scripting Vulnerability in DocCMS x1.0

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. DocCMS x1.0 online message at the...

Cisco Jabber Guest Server Cross-Site Scripting Vulnerability

Cisco Jabber Guest Server is a suite of software that allows users to interact in real time with employees of the organization. A cross-site scripting vulnerability exists in the Cisco Jabber Guest Server WEB script, which allows remote attackers to exploit the vulnerability to inject malicious...

CVE-2016-9981

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257...

Design/Logic Flaw

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257...

CVE-2016-9981

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257...

CVE-2016-9981

CVE-2016-9981 affects IBM AppScan Enterprise Edition 9.0. The available documents describe an unspecified vulnerability that could allow an attacker to hijack a valid user’s session. No concrete root-cause, affected component details, exploit vectors, or remediation steps are provided in the sour...

XOOPS Core imagemanager.php cross-site scripting vulnerability

XOOPS is XOOPS team development and maintenance of a set of open source PHP and MySQL based content management system . A cross-site scripting vulnerability exists in XOOPS imagemanager.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which...

Session Hijack

Moodle is vulnerable to session hijacking. The web service tokens in MoodleMobile do not expire, this allows attackers to brute-force usable session tokens...

Cisco Access Control System Cross-Site Scripting Vulnerability

The Cisco Secure Access Control System is the access policy control platform. A security vulnerability in the Web management interface of the Cisco Secure Access Control System ACS allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

Stored Cross-Site Scripting Vulnerability in aitecms Message Service

AIT aitecms to php + MySQL aitecms core for the development of customer information management system. A stored cross-site scripting vulnerability exists in the 'diy.php' message of aitecms. An attacker can insert malicious code into the page to obtain user cookies and other information, leading ...

MySQL Dumper Cross-Site Scripting Vulnerability

MySQL Dumper is a MySQL database backup script written in PHP and Perl. A cross-site scripting vulnerability in MySQL Dumper allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2017-26110)

Cisco Web Security Appliance is the United States Cisco Cisco company's set of Web security appliances. A cross-site scripting vulnerability exists in the Cisco Web Security Appliance WEB interface, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code...

CVE-2017-9413

Multiple cross-site request forgery CSRF vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that 1 subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or 2 update Internet Radio Settings via the...

cPanel Cross-Site Scripting Vulnerability

cPanel is a set of Web-based host control management system of the U.S. cPanel. A cross-site scripting vulnerability in the cPanel WHM Upload Locale interface allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...

kitto cross-site scripting vulnerability

kitto is an interactive dashboard framework written using Elixir. A cross-site scripting vulnerability exists in the kitto 404 page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-16933)

Adobe Connect is web conferencing software. Adobe Connect suffers from a cross-site scripting vulnerability in its implementation, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack a user...

Adobe Connect HTML Injection Vulnerability

Adobe Connect is web conferencing software. Adobe Connect suffers from a cross-site scripting vulnerability in its implementation, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack a user...

Apache OpenMeetings Cross-Site Scripting Vulnerability (CNVD-2017-23479)

Apache OpenMeetings is audio and video conferencing software. Apache OpenMeetings suffers from a cross-site scripting vulnerability in its implementation, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to...