Nucleus CMS Cross-Site Scripting Vulnerability

Nucleus CMS is an open source PHP-based blog management software package developed by the Nucleus team. A cross-site scripting vulnerability exists in Nucleus CMS version 3.65. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'title'...

CVE-2015-5454

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

CVE-2015-5454

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

Nucleus CMS 3.65 Cross Site Scripting

​ Exploit Title: Persistent Cross Site Scripting Vulnerability in nucleuscms Date: 25 July 2015 Exploit Author: sharan kumar somana Vendor Homepage: http://www.nucleuscms.org Software Link: http://sourceforge.net/projects/nucleuscms/?source=typredirect Version: 3.65 Tested on: Windows 7 nucleuscm...

Multiple Cross-Site Scripting Vulnerabilities in SAP NetWeaver Business Client

SAP NetWeaver Business Client NWBC is a new-generation SAP client from SAP, which provides users with a single-sign-on entry point to SAP applications through a single user interface and serves as a browsing tool for applications such as SAP BSP, Web Dynpro and Portal. A cross-site scripting...

PHPDug has multiple cross-site scripting vulnerabilities

PHPDug is an open source social news site that supports sharing stories, news, images and more. PHPDug 2.0.0 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the storyurl parameter to addstoryphp editprofilephp, and...

Sql injection

Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the 1 sectionID parameter to admin/managersection.php, 2 userID parameter to admin/edituser.php, 3 username parameter to admin/admin.php, or 4 title parameter to...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter...

CVE-2014-9434

Cross-site scripting XSS vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.73 allows remote authenticated users to inject arbitrary web script or HTML via the title parameter...

CVE-2011-5301

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

CVE-2011-5301

Multiple cross-site scripting XSS vulnerabilities in PHPDug 2.0.0 allow remote attackers to inject arbitrary web script or HTML via 1 the storyurl parameter to addstory.php, 2 the email parameter to editprofile.php, 3 the title parameter to adm/contentadd.php, or 4 the username parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in view.php in JCE-Tech PHP Video Script aka Video Niche Script 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 video or 2 title parameter...

CVE-2014-9129

Cross-site request forgery CSRF vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the addonstitle parameter in the...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the CreativeMinds CM Downloads Manager plugin before 2.0.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the addonstitle parameter in the...

PT-2014-8839 · Creative Mind · Cm Download Manager

Name of the Vulnerable Software and Affected Versions: CreativeMinds CM Downloads Manager plugin versions prior to 2.0.7 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS...

CVE-2014-3854

Cross-site request forgery CSRF vulnerability in admin/addScript.py in Pyplate 0.08 allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the title parameter...

WordPress Seo Link Rotator Plugin - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in pusher.php title parameter. Solution Upgrade the plugin...

Cross site scripting

Cross-site scripting XSS vulnerability in templates/download.php in the SS Downloads plugin before 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Arab Portal System 2.0 online.php title Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CVE-2014-4165

Cross-site scripting XSS vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to plugins/rrdPlugin...