PT-2017-17574

Name of the Vulnerable Software and Affected Versions GamePanelX-V3 version 3.0.12 Description A Cross-Site Scripting issue was discovered due to insufficient filtration of user-supplied data passed to the "GamePanelX-V3-master/ajax/ajax.php" API endpoint. This allows an attacker to execute...

Ganglia Web < 3.5.8 XSS Vulnerability

Ganglia Web is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ganglia Web < 3.5.6 Multiple XSS Vulnerabilities

Ganglia Web is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Unified Computing System Director Cross-Site Scripting Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...

Moodle 3.2.x < 3.2.2 Multiple Vulnerabilities

Binary data 700011.prm...

F-Secure Anti-Virus Remote Code Execution Vulnerability

F-Secure is an antivirus program developed by a Finnish company. A remote code execution vulnerability exists in F-Secure Anti-Virus. An attacker could exploit the vulnerability to execute arbitrary script code in the environment of a system account...

Cisco Prime Service Catalog Multiple Cross-Site Scripting Vulnerabilities

A vulnerability in the web framework code of the Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

Cross site scripting

Cross-site scripting XSS vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-17407

Name of the Vulnerable Software and Affected Versions Open.GL versions prior to 2017-03-13 Description The issue exists due to insufficient filtration of user-supplied data passed to the "Open.GL-master/index.php" URL. This allows an attacker to execute arbitrary HTML and script code in a browser...

CVE-2014-3926

Cross-site scripting XSS vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03614)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. MaNGOSWebV4 suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03507)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.shop.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03505)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.donate.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03615)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03506)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.fplinks.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-6541

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in...

OneThird CMS vulnerable to cross-site scripting

Overview OneThird CMS provided by SpiQe Software contains a cross-site scripting vulnerability CWE-79 due to an issue in processing the inquiry form. Note that this vulnerability is different from JVN49408248. Satoshi Takagi of Cryptography Laboratory,Department of Information and Communication...

PT-2017-17138

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as url and pssid, passed to the "/webpagetest-master/www/weblite.php" API endpoint. This...

PT-2017-17107

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.1.1 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "EPESI-master/modules/Utils/RecordBrowser/grid.php" URL. An attacker could execute...

PT-2017-7480

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to specific pages, including 1 the media page, 2 the developer data edit page, or 3 the form page...