13585 matches found
CVE-2018-5984: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...
CVE-2018-5955: Improper Input Validation
An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI...
Jolla Sailfish OS URI Spoofing Vulnerability
Jolla Sailfish OS is a MeeGo-based operating system developed by the Finnish company Jolla. A URI spoofing vulnerability exists in Jolla Sailfish OS versions prior to 1.1.2.16. A remote attacker can exploit the vulnerability to spoof a phone number and make a call to an arbitrary number...
CVE-2018-5370
BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI...
Design/Logic Flaw
BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI...
CVE-2018-5370
CVE-2018-5370 affects BizLogic xnami 1.0, a PHP-based image sharing script. The issue is a Cross-Site Scripting (XSS) vulnerability via the comment parameter in the addComment action to the /media/ajax URI. The root cause is insufficient input sanitization on the comment field, enabling injection...
CVE-2018-5370
BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI...
CVE-2018-5712: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file...
CVE-2018-5712
An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on the PHAR 404 error page via the URI of a request for a .phar file...
Xnami Image Sharing 1.0 Cross Site Scripting
Exploit Title: Xnami Image Sharing - Persistent XSS Vulnerability Google Dork: " Copyright 2017 xnami. " & 2018 Date: 11-01-2018 Exploit Author: Dennis Veninga Contact Author: d.veninga at networking4all.com Vendor Homepage: bizlogicdev.com Version: 1.0 CVE-ID: CVE-2018-5370 Xnami facilitates the...
CVE-2017-18023
Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI...
CVE-2017-18023
Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI...
CVE-2017-18023
Office Tracker 11.2.5 has a Cross-Site Scripting (XSS) vulnerability exposed via the logincount parameter to the /otweb/OTPClientLogin URI. The logincount value is copied into the HTML response as plain text, allowing an attacker to inject arbitrary script (example from public payloads shows a sc...
Cobham Sea Tel Information Disclosure Vulnerability
Cobham Sea Tel is a suite of wireless communication terminals from Cobham UK. An information disclosure vulnerability exists in Cobham Sea Tel version 121 build 222701. An attacker can exploit this vulnerability by reading the loginName line in the js/userLogin.js URI to obtain sensitive...
PT-2018-6619
Name of the Vulnerable Software and Affected Versions: AvantFAX version 3.3.3 Description: The issue allows for XSS via an arbitrary parameter name to the default URI. This can be demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1. There have been reports of thi...
CVE-2017-18024: Improper Neutralization of Input During Web Page Generation
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1...
CVE-2018-3815
The "XML Interface to Messaging, Scheduling, and Signaling" XIMSS protocol implementation in CommuniGate Pro CGP 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email spoofing attack, allowing a malicious authenticated attacker to send a message from any source email...
Mail.ru: XSS уязвимость
Reflected XSS in https://account.mail.ru/signup via URI GET parameters...
Liferay Portal CE /html/portal/flash.jsp page cross-site scripting vulnerability
Liferay Portal CE is an open source enterprise networking platform. The platform is used to build company operations, business solutions. A cross-site scripting vulnerability exists in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and earlier versions. A remote attacker can exploit...