CVE-2018-11027

CVE-2018-11027 affects Ruckus ICX7450-48 devices, with a reflected XSS in the web interface. The issue arises from improper handling of input in the web app, allowing remote attackers to inject arbitrary script/HTML when a victim visits a crafted URL. Documents confirm affected device family (ICX...

CVE-2018-11027: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML...

ClipperCMS 1.3.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link:...

wityCMS 0.6.1 - Cross-Site Scripting

Exploit Title: wityCMS 0.6.1 Persistent XSS on "Website's name" field Date: 05/28/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://creatiwity.net/witycms Software Link: https://github.com/Creatiwity/wityCMS/releases/tag/0.6.1 Version: 0.6.1 Tested on:...

Clipper CMS 1.3.3 Cross Site Scripting

Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Date: 05/27/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link: https://github.com/ClipperCMS/ClipperCMS/releases/tag/clipper1.3.3 Version: 1.3.3 Tested on:...

ClipperCMS 1.3.3 - Cross-Site Scripting

Exploit Title: ClipperCMS 1.3.3 Persistent XSS on 'Site name' field Date: 05/27/2018 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: http://www.clippercms.com/ Software Link: https://github.com/ClipperCMS/ClipperCMS/releases/tag/clipper1.3.3 Version: 1.3.3 Tested on:...

CVE-2018-11332

Stored cross-site scripting XSS vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the manager/processors/savesettings.processor.php file...

CVE-2018-11332

Stored cross-site scripting XSS vulnerability in the "Site Name" field found in the "site" tab under configurations in ClipperCMS 1.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted site name to the manager/processors/savesettings.processor.php file...

D-Link DIR-620 Router Cross Site Scripting Vulnerability

D-link DIR-620 is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-620 due to the program failing to filter for special characters in the 'Search' field and failing to properly handle XMLHttpRequest objects. A remote attacker can use this...

CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

CVE-2018-10095

Cross-site scripting XSS vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...

CVE-2018-11093

Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...

CVE-2018-11093

Cross-site scripting XSS vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a crafted href attribute of a link A element...

CVE-2018-11208

An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type...

Design/Logic Flaw

DISPUTED An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block...

CVE-2018-11208

An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type...

CVE-2018-11208

An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type...

Open Whisper Signal Cross-Site Scripting Vulnerability

Open Whisper Signal aka Signal-Desktop is a live chat application with encryption. A cross-site scripting vulnerability exists in the js/views/messageview.js file in Open Whisper Signal versions prior to 1.10.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HT...

Micro Focus NetIQ Identity Reporting Cross-Site Scripting Vulnerability

Micro Focus NetIQ Identity Reporting is a suite of identity reporting modules for use in NetIQ Identity Manager from Micro Focus UK. A security vulnerability exists in versions prior to Micro Focus NetIQ Identity Reporting 5.5 Service Pack 1. An attacker could exploit the vulnerability to inject...