WordPress crafty-social-buttons plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. crafty-social-buttons is a plugin for adding links to social networking sites. A cross-site scripting vulnerability exists in the...

CVE-2019-15533

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...

UBUNTU-CVE-2019-15486

django-js-reverse aka Django JS Reverse before 0.9.1 has XSS via jsreverseinline...

WordPress ninja-forms plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. A SQL injection vulnerability exists in the WordPress ninja-forms plugin...

Cross-site Scripting (XSS)

security-admin-web is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization of name...

Adive Framework Cross-Site Scripting Vulnerability (CNVD-2020-17024)

Adive Framework is a PHP-based MySQL database management framework . A cross-site scripting vulnerability exists in Adive Framework 2.0.7 and earlier versions, which stems from the lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

Magento Path Traversal Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A path traversal vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2, and 2.3.2 before...

Magento cross-site scripting vulnerability (CNVD-2019-25989)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2.2...

cPanel Input Validation Error Vulnerability (CNVD-2019-26365)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in versions of cPanel prior to 78.0.2. The vulnerability stems from a web-based...

cPanel Formatting String Error Vulnerability (CNVD-2019-33888)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A formatting string error vulnerability exists in cPanel, no details of the vulnerability are available at this time...

PT-2019-2899 · Icedtea +4 · Icedtea-Web +4

Name of the Vulnerable Software and Affected Versions: icedtea-web versions 1.7.2 and earlier icedtea-web versions 1.8.2 and earlier Description: The issue is related to a zip-slip attack during auto-extraction of a JAR file, which could allow an attacker to write files to arbitrary locations. Th...

PT-2019-2938 · Icedtea +4 · Icedtea-Web +4

Name of the Vulnerable Software and Affected Versions: icedtea-web versions 1.7.2 and earlier icedtea-web versions 1.8.2 and earlier Description: The issue is related to insufficient authentication of data, allowing an attacker to inject executable code into a JAR file without compromising...

CVE-2019-5457

Cross-site scripting XSS vulnerability in min-http-server all versions allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-26398)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

The vulnerability in the lxml.html.clean module’s lxml/html/clean.py file allows a attacker to execute cross-site scripting attacks.

The vulnerability in the lxml.html.clean module’s lxml/html/clean.py file relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

SunHater KCFinder Cross-Site Scripting Vulnerability

SunHater KCFinder is an open source file manager. A cross-site scripting vulnerability exists in SunHater KCFinder. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

EspoCRM cross-site scripting vulnerability (CNVD-2019-24798)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.6. The vulnerability stems from the WEB application...

XML Entity Injection Vulnerability in PageOffice of Beijing Zhuozheng Zhiyuan Software Co.

PageOffice is a solution & product of Zhuozheng Software to solve office online office. PageOffice of Beijing Zhuozheng Zhiyuan Software Co., Ltd. exists XML entity injection vulnerability. The vulnerability arises from the program fails to adequately validate the XML document received from an...

CVE-2019-1010113

Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting XSS. The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a lin...

e107 cross-site scripting vulnerability (CNVD-2019-23526)

e107 is an open source, free and PHP and MySQL based Content Management System CMS from the e107 team. The system supports a wide range of plug-ins and look-alike themes, and can be used as a personal blog, discussion community, archive repository and so on. A cross-site scripting vulnerability...