Cross site scripting

Cross-site scripting XSS vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Orchard Cross-Site Scripting Vulnerability

Orchard is a Microsoft-led open source CMS project from the Outercurve Foundation. A cross-site scripting vulnerability exists in Orchard that allows remote attackers to inject arbitrary web script or HTML...

CVE-2015-4528: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in EMC Documentum CenterStage 1.2SP1 and 1.2SP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Infra Admin UI in Cisco Identity Services Engine ISE 1.21.198 and 1.30.876 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCus16052...

CVE-2015-4270: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702...

Cross-Site Scripting Vulnerabilities in Multiple ESRI Products

ESRI ArcGIS is a set of geographic information system GIS based on SOA architecture from Environmental Systems Research Institute ESRI, which can share GIS resources such as 2D and 3D maps, address locators, spatial databases, and geoprocessing tools as a service across an enterprise or across th...

PT-2015-6488

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution version 10.61 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL. Recommendations For Cisco Hosted Collaboration Solution...

Cross site scripting

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

CVE-2015-2850

Cross-site scripting XSS vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

PT-2015-4374

Name of the Vulnerable Software and Affected Versions Rules Link module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote authenticated users with the "administer rules links" permission to inject arbitrary web script or HTML via unspecified vectors. This is due to improper...

PT-2015-5520

Name of the Vulnerable Software and Affected Versions IBM Tivoli Federated Identity Manager versions 6.2.0 through 6.2.0 FP16 IBM Tivoli Federated Identity Manager versions 6.2.1 through 6.2.1 FP8 IBM Tivoli Federated Identity Manager versions 6.2.2 through 6.2.2 FP14 Description The issue allows...

CVE-2015-5365

Cross-site scripting XSS vulnerability in Zurmo CRM 3.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "What's going on?" profile field...

PT-2015-6785

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus version 7.90 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the query parameter in the "run query editor query" module to...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-4492

Name of the Vulnerable Software and Affected Versions IBM Leads versions 7.x, 8.1.0 through 8.1.0.13, 8.2, 8.5.0 through 8.5.0.7.2, 8.6.0 through 8.6.0.8.0, 9.0.0 through 9.0.0.4, 9.1.0 through 9.1.0.6.0, 9.1.1 through 9.1.1.0.1 Description The issue allows remote authenticated users to inject...

CVE-2015-1978: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11, and 6.4 before iFix 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0131: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified...

PT-2015-5526

Name of the Vulnerable Software and Affected Versions IBM Tivoli Security Directory Server versions 6.0 through 6.0 before iFix 75 IBM Tivoli Security Directory Server versions 6.1 through 6.1 before iFix 68 IBM Tivoli Security Directory Server versions 6.2 through 6.2 before iFix 44 IBM Tivoli...

Multiple Cross-Site Scripting Vulnerabilities in MySql Lite Administrator beta-1

MySql Lite Administrator is a graphical tool for managing Mysql database files. A cross-site scripting vulnerability exists in MySql Lite Administrator beta-1. Due to the tabella.php, coloni.php, and insert.php scripts failing to adequately filter the 'tablename' parameter; the coloni.php script...

Koha 3.20.1 - Multiple XSS and XSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Koha Open Source ILS - Multiple XSS and XSRF Vulnerabilities Google Dork: Date: 25/06/2015 Exploit Author: Raschin Tavakoli, Bernhard Garn, Peter Aufner and Dimitris Simos - Combinatorial Security Testing Group of SBA Research...