Cross site scripting

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

CVE-2017-14801

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

CVE-2017-14801: Improper Neutralization of Input During Web Page Generation

Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...

PT-2018-5722

Name of the Vulnerable Software and Affected Versions: NetIQ Access Manager versions prior to 4.3.3 Description: The issue allows attackers to perform a reflected XSS attack by using the url parameter to reflect back malicious code into the called page. Recommendations: For versions prior to 4.3....

knsgj.net XSS vulnerability

Open Bug Bounty ID: OBB-566312 Description| Value ---|--- Affected Website:| knsgj.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Server side request forgery (ssrf)

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

CVE-2018-7055: Server-Side Request Forgery (SSRF)

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter...

PT-2018-17873

Name of the Vulnerable Software and Affected Versions RoomWizard versions prior to 4.4.x Description The issue allows for Server-Side Request Forgery SSRF via the url parameter in the GroupViewProxyServlet. Recommendations For versions prior to 4.4.x, update to version 4.4.x or later to resolve t...

Cozy Cross-Site Scripting Vulnerability

Cozy is a personal cloud platform. The platform features file storage and management, application backup, and schedule management. A cross-site scripting vulnerability exists in Cozy. A remote attacker can exploit this vulnerability to gain administrator access via JavaScript code in the 'url'...

CVE-2018-6824

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

Cross site request forgery (csrf)

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"email protected"' request, which can be followed by a password reset...

PT-2018-17760

Name of the Vulnerable Software and Affected Versions Cozy version 2 Description The issue allows remote attackers to obtain administrative access via JavaScript code in the url parameter to the "/api/proxy" API endpoint. This can be achieved through an XMLHttpRequest call with a request containi...

CVE-2018-6824: Improper Neutralization of Input During Web Page Generation

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

Atlassian Confluence Server Cross-Site Scripting Vulnerability (CNVD-2018-03444)

Atlassian Confluence Server is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing amongst team members. A cross-site scripting...

CVE-2017-18086

Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the issuesURL parameter...

CVE-2018-6200: URL Redirection to Untrusted Site

vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter...

omahalibrary.org XSS vulnerability

Open Bug Bounty ID: OBB-527213 Description| Value ---|--- Affected Website:| omahalibrary.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

CVE-2017-17947

CVE-2017-17947 is a cross-site scripting vulnerability in Pulse Secure’s Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) affecting custompage.cgi. The issue arises from one unsanitized URL parameter, enabling injected script when the attacker is authenticated as an administrator; it does...

smato0tr3398.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-515538 Description| Value ---|--- Affected Website:| smato0tr3398.godo.co.kr Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:...

WordPress Z-URL Preview Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. z-URL Preview plugin is used in one of the external links to get the plugin . A cross-site scripting vulnerability...