Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-32710)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-scripting vulnerability vulnerability exists in the 'Tasks...

CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

UBUNTU-CVE-2017-14241

Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...

Cross-site Scripting (XSS)

bolt/bolt is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when editing the title parameter for content...

Synology Video Station Cross-Site Scripting Vulnerability

Synology Video Station is a video manager from Synology.Video Metadata Editor is one of the video metadata editors. A cross-site scripting vulnerability exists in Video Metadata Editor in Synology Video Station versions prior to 2.3.0-1435. A remote attacker can exploit the vulnerability to injec...

CVE-2017-9556

Cross-site scripting XSS vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter...

XYCMS b_title parameter has SQL injection vulnerability

XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. A SQL injection vulnerability exists in the XYCMS btitle parameter. An attacker can exploit the vulnerability to obtain sensitive database...

CVE-2017-7255

XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1title parameter. Someone must login to conduct the attack...

PT-2017-17614 · Cms Made Simple · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.1.6 Description: A security issue exists in the "Content--News--Add Article" feature of the software, where an attacker can exploit the m1 title parameter to conduct a cross-site scripting XSS attack. This attack...

SQL Injection Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

Mini Notice Board Cross-Site Scripting Vulnerability

Mini Notice Board 1.1 is an online bulletin board application that primarily facilitates the posting of trading announcements. A cross-site scripting vulnerability exists in the title and address parameters of the addcard.php page in Mini Notice Board 1.1. Due to the program failing to adequately...

PHP Press Release Cross-Site Scripting Vulnerability

PHP Press Release is a software that allows you to manage your organization's press releases via the web, and the public can access recent releases via the web. A stored cross-site scripting vulnerability exists in the title parameter of the administration.php page of PHP Press Release, which can...

SQL Injection Vulnerability in the Title Parameter of the Digital Newspaper System/www/index.php Page of Pleasant Reading Media

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=deliver&title=1, the vulnerability parameter is: title, the attacker can use the vulnerability to...

Speed Tony CMS App_Site/SiteSearch. the aspx file Title parameter SQL injection vulnerability

No description provided by source...

CVE-2016-0711

Multiple cross-site scripting XSS vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a 1 link, 2 page, or 3 folder resource...