Barracuda Cloud Control 7.1.1.003 Cross Site Scripting

Document Title: =============== Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...

GhostMail Filename To Link Script Insertion

Document Title: =============== GhostMail - filename to link POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1471 Release Date: ============= 2018-06-26 Vulnerability Laboratory ID VL-ID: ====================================...

GhostMail Status Message HTML Injection

Document Title: =============== GhostMail - Status Message Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1470 Release Date: ============= 2018-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 14...

BMW - (Token) Cross Site Scripting Web Vulnerability

Document Title: =============== BMW - Token Cross Site Scripting Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1914 Video: https://www.youtube.com/watch?v=txjW7fpMJ-Q Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1737 Vulnerability...

Barracuda Cloud Control 7.1.1.003 - XSS Web Vulnerability

Document Title: =============== Barracuda Cloud Control 7.1.1.003 - XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-16 Vulnerability Laboratory ID VL-ID: ====================================...

jumputi.gamerch.com XSS vulnerability

Open Bug Bounty ID: OBB-647317 Description| Value ---|--- Affected Website:| jumputi.gamerch.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Barracuda ADC 5.x Cross Site Scripting

Document Title: =============== Barracuda ADC v5.x - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1424 Release Date: ============= 2018-07-12 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2018-10197

There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET...

SemCMS php version of foreign trade website SEMCMS_Ba****.php page has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

GONICUS Gosa Cross-Site Scripting Vulnerability

GONICUS GOsa is an LDAP front-end management system for user administration. A cross-site scripting vulnerability exists in the password change form in versions prior to GONICUS GOsa commit 56070d6289d47ba3f5918885954dcceb75606001. A remote attacker can exploit this vulnerability to inject...

Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1423 Release Date: ============= 2018-07-09 Vulnerability Laboratory ID VL-ID: ==================================...

Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability

Document Title: =============== Barracuda ADC 5.x - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1423 Release Date: ============= 2018-07-08 Vulnerability Laboratory ID VL-ID: ==================================...

IBM RQM/RCLM Cross-Site Scripting Vulnerability (CNVD-2018-12619)

IBM Rational Quality Manager is a Web-based collaborative quality management solution.IBM Rational Collaborative Lifecycle Management is an application lifecycle management solution. A cross-site scripting vulnerability exists in the implementation of IBM Rational Quality Manager and IBM Rational...

ZZCMS Arbitrary File Deletion Vulnerability (CNVD-2018-12559)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A security vulnerability exists in the /user/del.php file in ZZCMS version 8.3. The vulnerability can be exploited to delete arbitrary files by placing a relative path to the zzcmsmain form and sending a reque...

Salesforce Careermount - Bypass & XSS Web Vulnerability

Document Title: =============== Salesforce Careermount - Bypass & XSS Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1969 Release Date: ============= 2018-07-04 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2018-12995

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

fsk-server Directory Traversal Vulnerability

Node.js module fsk-server is a simple http server. A directory traversal vulnerability exists in fsk-server. An attacker can exploit this vulnerability by placing ". /" in a url to access the file system...

GhostMail - (Filename to Link) Cross Site Web Vulnerability

Document Title: =============== GhostMail - Filename to Link Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1471 Release Date: ============= 2018-06-25 Vulnerability Laboratory ID VL-ID: ====================================...

Salesforce RegistrationForm - Persistent Web Vulnerability

Document Title: =============== Salesforce RegistrationForm - Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2054 Salesforce Security ID: 219513 Release Date: ============= 2018-06-22 Vulnerability Laboratory ID VL-ID:...

PayPal (Notify) - Bypass & Persistent Web Vulnerability

Document Title: =============== PayPal Notify - Bypass & Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1640 Video: http://www.vulnerability-lab.com/getcontent.php?id=1639 Release Date: ============= 2018-06-22 Vulnerability...