CVE-2012-0891

Multiple cross-site scripting XSS vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields...

PT-2014-2502

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.7 Description The issue allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the quota parameter to "/core/settings/ajax/setquota.php". Additionally,...

PT-2014-2210

Name of the Vulnerable Software and Affected Versions Puppet Dashboard versions 1.0 through 1.2.5 Puppet Enterprise versions 1.0 through 1.2.5 Puppet Enterprise versions 2.x through 2.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified fields,...

CVE-2014-2291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pulse Collaboration Secure Meeting user pages in Juniper Junos Pulse Secure Access Service aka SSL VPN with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows remote authenticated users to inject arbitrary web scrip...

PT-2014-2442

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.0.12 ownCloud versions 4.5.x prior to 4.5.7 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the site name or site url parameter to t...

PT-2014-4625

Name of the Vulnerable Software and Affected Versions Proxmox Mail Gateway versions prior to 3.1-5829 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the state parameter to the "objects/who/index.htm" endpoint or the User email addres...

CVE-2013-2040: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5.11, and 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Phone, 2 Street, 3 Address line, 4 Zip code, or 5 City field to main/auth/profile.php; 6 Subject field to main/social/groups.php; or 7 Message body field to...

PT-2014-4336

Name of the Vulnerable Software and Affected Versions Dokeos version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via several fields, including the Phone, Street, Address line, Zip code, or City field to "main/auth/profile.php", the Subject field to...

Cross site scripting

Cross-site scripting XSS vulnerability in DotNetNuke DNN before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the dnnVariable parameter to the default URI...

CVE-2013-1636

Removed by vendor...

CVE-2013-2289

CVE-2013-2289 describes a Cross-site Scripting (XSS) vulnerability in Batavi 1.2.2, specifically in admin/templates/default.php, exploitable by sending crafted data via the QUERY_STRING to admin/index.php. Affected component/file: Batavi 1.2.2’s admin templates; root cause is unsanitized QUERY_ST...

Cross site scripting

Cross-site scripting XSS vulnerability in the user interface in the AAA TM vServer in Citrix NetScaler Application Delivery Controller ADC 9.3.x before 9.3-64.4, 10.0 before 10.0-77.5, and 10.1 before 10.1-118.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2014-1944

CVE-2014-1944 describes a Cross-Site Scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier. The issue arises from insufficient sanitisation of the HTTP POST parameter text sent to /index.php/guestbook/index/newentry, allowing a remote unauthenticated user to inject arbitrary HTML/script that ...

PT-2014-3085

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Enterprise Records versions 4.5.1 through 4.5.1.7-IER-IF001 IBM InfoSphere Enterprise Records versions 5.1.1 through 5.1.1.1-IER-IF003 Description A cross-site scripting XSS issue allows remote authenticated users to inject...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-6300

CVE-2013-6300 is a cross-site scripting (XSS) vulnerability affecting IBM Algo One as used in MetaData Management Tools in UDS 4.7.0–5.0.0, and in ACSWeb for Algo Security Access Control Management 4.7.0–4.9.0, plus AlgoWebApps 5.0.0. The issue allows remote authenticated users to inject arbitrar...

B-net Software Content Management System shout.php name Parameter XSS - Ver2 (CVE-2006-0078)

A cross-site scripting vulnerability has been reported in Haddad Said B-net Software 1.0. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...