Cross site scripting

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

CVE-2018-20140

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

CVE-2018-20140

CVE-2018-20140 affects ZenPhoto 1.4.14. The vulnerability is described as multiple cross-site scripting (XSS) flaws exploitable via different URL parameters (e.g., SEARCH_state, SEARCH_country, SEARCH_city). The issue is caused by improper handling of user input in these parameters, enabling inje...

CVE-2018-20140: Improper Neutralization of Input During Web Page Generation

Zenphoto 1.4.14 has multiple cross-site scripting XSS vulnerabilities via different URL parameters...

PT-2019-10002

Name of the Vulnerable Software and Affected Versions: Zenphoto version 1.4.14 Description: The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities can be exploited via different URL parameters. Recommendations: For Zenphoto version 1.4.14, update to a new...

CVE-2018-20807

CVE-2018-20807 affects Pulse Secure Pulse Connect Secure (PCS) via an XSS in welcome.cgi. Affected: PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, 8.3.x before 8.3R3. Root cause: improper sanitization of a URL parameter in the WEB app, enabling client-side script execution. Impact: client-side code...

CVE-2018-20807

An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure PCS 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly...

Information disclosure

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

CVE-2017-1198

CVE-2017-1198 affects IBM BigFix Compliance 1.7–1.9.91 (TEMA SUAv1 SCA SCM). The underlying issue is that sensitive information is stored in URL parameters, enabling potential information disclosure if URLs are exposed in server logs, referrer headers, or browser history. The NVD entry notes expl...

CVE-2017-1198: Insertion of Sensitive Information into Log File

IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673...

PT-2019-7904

Name of the Vulnerable Software and Affected Versions IBM BigFix Compliance versions 1.7 through 1.9.91 Description The issue concerns the storage of sensitive information in URL parameters, which could lead to information disclosure if unauthorized parties gain access to the URLs through server...

SuiteCRM 7.10.7 - record SQL Injection

SuiteCRM 7.10.7 - record SQL Injection Exploit Title: SuiteCRM 7.10.7 - 'record' SQL Vulnerabilities Dork: N/A Date: 03-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://suitecrm.com/ Software Link: https://suitecrm.com/download/ Version: 7.10.7 Category: Webapps Tested on: Wampp...

Battelle V2I Hub Cross-Site Scripting Vulnerability

The Battelle V2I Hub is a connected vehicle and roadway information management system from Battelle Memorial Institute, Inc. The system supports effective communication between infrastructure information and vehicle information. A cross-site scripting vulnerability exists in Battelle V2I Hub...

Information disclosure

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747...

CVE-2017-1272

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747...

CVE-2017-1272

IBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 124747. IBM X-Force ID: 124747...

PT-2018-5447

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 10.0 through 10.5 Description: The issue allows sensitive information to be stored in URL parameters, potentially leading to information disclosure if unauthorized parties gain access to the URLs through server...