29800 matches found
CVE-2018-0537
CVE-2018-0537 describes a cross-site scripting (CWE-79) vulnerability in QQQ SYSTEMS ver2.24. The flaw resides in the quiz_op.cgi CGI script, allowing an attacker-controlled script or HTML to be injected and executed in a victim’s browser when visiting a page that uses the product. Reported impac...
CVE-2018-0538
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0535
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0536
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...
PT-2018-8894
Name of the Vulnerable Software and Affected Versions PHP 2chBBS version bbs18c Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For PHP 2chBBS version bbs18c, update to a version that fixes this issue, as no specific workaround i...
PT-2018-8895
Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via the quiz.cgi endpoint. Recommendations For QQQ SYSTEMS version 2.24, consider restricting access to the quiz.cgi...
PT-2018-8893
Name of the Vulnerable Software and Affected Versions ArsenoL version 0.5 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Recommendations For ArsenoL version 0.5, at the moment, there is no information about a newer versi...
CVE-2018-0538: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0536: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...
CVE-2018-0535: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0534: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-0537: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quizop.cgi...
PT-2018-8897
Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For QQQ SYSTEMS version 2.24, at the moment, there is no information about a newer version that contai...
CVE-2018-1229
Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. This issue has not been patched because...
CVE-2015-7460
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108356...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108356...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108354...
Cross site scripting
Cross-site scripting XSS vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file...
CVE-2015-7459
Cross-site scripting XSS vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108355...
