Cross site scripting

Cross-site scripting XSS vulnerability in the Send to Inbox functionality in SAP BusinessObjects BI EDGE 4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-8702

Name of the Vulnerable Software and Affected Versions Drupal Maestro module versions prior to 7.x-1.4 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Role or Organic Group name. Recommendations For versions prior to...

PT-2014-8707

Name of the Vulnerable Software and Affected Versions Google Doubleclick for Publishers DFP module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with the "administer dfp" permission to inject arbitrary web script or HTML via a slot name, which is a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Epicor Enterprise 7.4 before FS74SP6HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the 1 Notes section to Order details; 2 Description section to "Order to consume"; 3 Favorites name section to Favorites; 4...

CVE-2014-4312

CVE-2014-4312 affects Epicor Enterprise 7.4 prior to FS74SP6_HotfixTL054181. The issue comprises multiple cross-site scripting (XSS) vectors that allow remote attackers to inject arbitrary script/HTML via several parameters and UI fields (Notes in Order details, Description in Order to consume, F...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4661

CVE-2014-4661: HP Records Manager is affected by a remote XSS in HP Records Manager 7.3.5 and 8.x up to 8.1 Patch 3. HP notes that HP Records Manager v8.1 Patch 3 and v7.3.5 (and earlier) are impacted; the vulnerability allows remote injection of script/HTML via unspecified vectors. Remediation p...

CVE-2014-4312: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Epicor Enterprise 7.4 before FS74SP6HotfixTL054181 allow remote attackers to inject arbitrary web script or HTML via the 1 Notes section to Order details; 2 Description section to "Order to consume"; 3 Favorites name section to Favorites; 4...

PT-2014-5807

Name of the Vulnerable Software and Affected Versions Epicor Enterprise version 7.4 before FS74SP6 HotfixTL054181 Description The issue allows remote attackers to inject arbitrary web script or HTML via several sections and parameters, including the Notes section to Order details, the Description...

PT-2014-6258

Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue allows remote authenticated users with console access to inject arbitrary web script or HTML. This can be achieved through various means, including a Graph Tree Title in a delete or edit action, CDEF...

CVE-2014-7983

Cross-site scripting XSS vulnerability in comcontact in Joomla! CMS 3.1.2 through 3.2.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7982

Cross-site scripting XSS vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7980

Multiple cross-site scripting XSS vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skiplinktext setting and unspecified...

CVE-2014-4510

Cross-site scripting XSS vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-7869

Cross-site scripting XSS vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer contexts" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2014-2644: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2014-6291

Cross-site scripting XSS vulnerability in the Alphabetic Sitemap alphasitemap extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7138

Name of the Vulnerable Software and Affected Versions TYPO3 External links click statistics outstats extension version 0.0.3 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For version...