7605 matches found
CVE-2014-3134
Cross-site scripting XSS vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3134
Cross-site scripting XSS vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-4380
Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions prior to 5.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 5.0.3, update to version 5.0.3 or later to resolve t...
CVE-2013-1804
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the 1 highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the...
CVE-2013-1804
PHP-Fusion prior to 7.02.06 contains multiple XSS vulnerabilities enabling an attacker to inject arbitrary scripts via numerous parameters (e.g., forum/viewthread.php highlight, messages.php user_list/user_types, shoutbox_admin.php message, administration/news.php message, administration/panel_ed...
CVE-2013-4722
Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which is not properly handled when displaying the Subjects tab in the View Properties menu option...
CVE-2014-2890
Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...
CVE-2014-2890
The CVE-2014-2890 entry affects phpMyID 0.9. The XSS vulnerability is in the wrap_html function of MyID.php, exploitable via the openid_error parameter to MyID.config.php when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or HTML; the issue stems from im...
CVE-2013-2187
CVE-2013-2187 affects Apache Archiva: XSS in the Home Page parameter handling. Vulnerable versions are Archiva 1.2.x up to 1.2.2 and 1.3 up to 1.3.6 (before 1.3.8); the issue allows injection of arbitrary HTML/JS via unspecified parameters. The root cause is input validation related to the home p...
PT-2014-2552
Name of the Vulnerable Software and Affected Versions show in browser gem version 0.0.3 Description The issue allows local users to inject arbitrary web script or HTML via a symlink attack on the /tmp/browser.html file. This can potentially lead to the execution of malicious code. Recommendations...
CVE-2014-0932
Cross-site scripting XSS vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-2844
Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...
CVE-2014-2844: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in F-Secure Messaging Secure Gateway 7.5.0 before Patch 1862 allows remote authenticated administrators to inject arbitrary web script or HTML via the new parameter in the SysUser module to admin...
UBUNTU-CVE-2014-2856
Cross-site scripting XSS vulnerability in scheduler/client.c in Common Unix Printing System CUPS before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the ispathabsolute function...
PT-2014-4942
Name of the Vulnerable Software and Affected Versions Dell SonicWALL Email Security versions 7.4.5 and earlier Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the uploadPatch parameter to the "System/Advanced" page...
CVE-2014-2879: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the uploadPatch parameter to the System/Advanced page settingsadvanced.html or 2 the uploadLicenses parameter...
CVE-2011-4193
Cross-site scripting XSS vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, related to cloning...
PT-2014-3572
Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.3.9 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific fields, including the title field to certain template files, an event field, email field, or nickname...
