EUVD-2018-11454

Malware in sbrugna...

Liferay Portal Vulnerable to XSS in Profile Search Functionality

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay Portal Search Web before 1.0.3 from Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

CVE-2018-19770

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19770

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19770

CVE-2018-19770 is a confirmed cross-site scripting vulnerability in InfoVista VistaPortal SE 5.1 (build 51029). The flaw is a reflected XSS in the Users.jsp page via the ConnPoolName parameter. Affected software is VistaPortal SE (InfoVista); root cause is input reflected in the response without ...

CVE-2018-19770

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15085

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "Users.jsp" page, where reflected XSS is possible via the ConnPoolName parameter. Recommendations For InfoVista VistaPort...

CVE-2018-19770: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07230)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the Users.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the...

PT-2016-5647

Name of the Vulnerable Software and Affected Versions Liferay versions prior to 7.0.0 CE RC1 Description A cross-site scripting XSS issue exists in the Profile Search functionality, specifically in the users.jsp file. This allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2016-3670: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...