482 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...
CVE-2018-5690
Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...
CVE-2018-5690
CVE-2018-5690 is an XSS vulnerability in Dotclear 2.12.1 affecting the admin/users.php page. The issue occurs when processing the nb parameter (page limit number), allowing remote authenticated users to inject arbitrary web script or HTML. The affected component is the admin interface (users mana...
CVE-2018-5690: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/users.php in Dotclear 2.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the nb parameter aka the page limit number...
CVE-2015-8354
Cross-site scripting XSS vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitrary web script or HTML via the refer parameter to wp-admin/users.php...
CVE-2015-8354: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitrary web script or HTML via the refer parameter to wp-admin/users.php...
Apache2Triad Cross-Site Scripting Vulnerability
Apache2Triad is a server software deployment solution for Windows-based platforms. A cross-site scripting vulnerability exists in Apache2Triad version 1.5.4. A remote attacker can exploit this vulnerability by sending the 'account' parameter to the phpsftpd/users.php file to inject arbitrary web...
CVE-2017-12971
Cross-site scripting XSS vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php...
CVE-2017-12970
Cross-site request forgery CSRF vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that 1 add or 2 delete user accounts via a request to phpsftpd/users.php...
CVE-2017-12971
Apache2Triad 1.5.4 has a Persistent Cross-Site Scripting (XSS) vulnerability (CVE-2017-12971) in which an attacker can inject script/HTML via the account parameter to phpsftpd/users.php. The available sources confirm the affected product and vulnerable component (Apache2Triad 1.5.4) and the vulne...
CVE-2017-12971: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php...
CVE-2017-12970: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that 1 add or 2 delete user accounts via a request to phpsftpd/users.php...
CVE-2017-11680
Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...
CVE-2017-11680
Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...
CVE-2017-11680: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF exists in Hashtopussy 0.4.0, allowing an admin password change via users.php...
CVE-2017-7284: Improper Authentication
An attacker that has hijacked a Unitrends Enterprise Backup before 9.1.2 web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover...
Cross site scripting
Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...
CVE-2017-6544
CVE-2017-6544 affects Gargaj/wuhu (wuhu-master) with a reflected XSS in wuhu-master/www_admin/users.php (id parameter). The vulnerability arises from insufficient input validation on the id parameter, enabling arbitrary script execution in victims’ browsers. Documented in NVD/CVE, CNVD-2017-03837...
CVE-2017-6544
Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...
CVE-2017-6544: Improper Neutralization of Input During Web Page Generation
Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...