256 matches found
Cross site scripting
PHP-Proxy through 5.1.0 has Cross-Site Scripting XSS via the URL field in index.php...
CVE-2018-19785
PHP-Proxy through 5.1.0 has Cross-Site Scripting XSS via the URL field in index.php...
Cross-site Scripting
PHP-Proxy has Cross-Site Scripting XSS via the URL field in index.php...
CVE-2018-19785: Improper Neutralization of Input During Web Page Generation
PHP-Proxy through 5.1.0 has Cross-Site Scripting XSS via the URL field in index.php...
PT-2018-3688
Name of the Vulnerable Software and Affected Versions PHP-Proxy versions prior to 5.1.0 PHP-Proxy-App versions prior to 3.0 Description The issue is related to insufficient protection of the web page structure in the index.php component of the PHP-Proxy web proxy script, allowing a remote attacke...
CVE-2018-13312
Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field...
CVE-2018-13312
Cross-site scripting in noticegen.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript by modifying the "Input your notice URL" field...
Fedora 27 : git (2018-d5139c4fd6)
Upstream security update resolving an issue with git clone --recurse-submodules. From the upstream release announcement : These releases fix a security flaw CVE-2018-17456, which allowed an attacker to execute arbitrary code by crafting a malicious .gitmodules file in a project cloned with...
CVE-2018-18087
The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the Image URL field in the portfolio editor. The vulnerability is triggered by visiting /portfolio/$projecttitle...
CVE-2018-18087: Improper Neutralization of Input During Web Page Generation
The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web script or HTML via the Image URL field in the portfolio editor. The vulnerability is triggered by visiting /portfolio/$projecttitle...
PT-2018-2212
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in processing VCF files by the Windows Contacts component, which can be exploited to execute arbitrary code using a specially crafted VCF file with a malicious...
Passbolt Cross-Site Scripting Vulnerability
Passbolt API is an open source team password manager. A cross-site scripting vulnerability exists in the url field of the password workspace in Passbolt API versions 1.6.4 and earlier. A remote attacker could exploit this vulnerability to execute code, alter or delete resources...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
Default credentials
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
CVE-2017-1000442
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...
PT-2018-5213
Name of the Vulnerable Software and Affected Versions Passbolt API versions 1.6.4 and older Description The issue concerns a XSS vulnerability in the url field on the password workspace. Recommendations For Passbolt API versions 1.6.4 and older, update to a version newer than 1.6.4 to resolve the...
CVE-2017-1000442: Improper Neutralization of Input During Web Page Generation
Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace...