29800 matches found
CVE-2016-7981
Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...
CVE-2016-7149
Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function...
Cross site scripting
Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function...
Cross site scripting
Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...
CVE-2016-7981
Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...
CVE-2016-7150
Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name...
Cross site scripting
Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name...
CVE-2016-7981
Cross-site scripting XSS vulnerability in validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the varurl parameter in a validerxml action...
CVE-2016-7150
Cross-site scripting XSS vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name...
CVE-2016-3410: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka bugs 103956, 103995, 104475, 104838, and 104839...
PT-2017-8390
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve...
PT-2017-8387
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve...
PT-2017-8388
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve...
PT-2017-8392
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve...
PT-2017-8391
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 8.7.0, update to version...
PT-2017-8441
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 8.7.0, upda...
CVE-2017-5516
Multiple cross-site scripting XSS vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters...
Cross site scripting
Cross-site scripting XSS vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters...