EUVD-2008-6064

Malware in sbrugna...

celoxis.com XSS vulnerability

Open Bug Bounty ID: OBB-675247 Description| Value ---|--- Affected Website:| celoxis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

Celoxis 'p_ca_date'参数跨站脚本漏洞

No description provided by source...

Celoxis 'p_ca_date' parameter cross-site scripting vulnerability

Celoxis is a Web-based project management software from Celoxis India. The software provides collaborative management of projects, finances, expenses and more. A cross-site scripting vulnerability exists in Celoxis 9.5 and earlier versions. Due to the program failing to adequately filter...

Celoxis 9.5 Cross Site Scripting Vulnerability

Celoxis versions 9.5 and below suffer from a cross site scripting vulnerability. ================================================================ Celoxis alert"XSS" Advisory Timeline -------------------- 08/10/2015 - Informed Vendor about Issue 08/10/2015 - Vendor responded 12/11/2015 - Reminded...

Celoxis 9.5 Cross Site Scripting

================================================================ Celoxis alert"XSS" Advisory Timeline -------------------- 08/10/2015 - Informed Vendor about Issue 08/10/2015 - Vendor responded 12/11/2015 - Reminded Vendor 14/11/2015 - Vendor responded saying 'they changed the framework itself to...

Celoxis Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31514/info Celoxis is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

Cross site scripting

Cross-site scripting XSS vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter...

CVE-2008-6094

Cross-site scripting XSS vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter...

CVE-2008-6094

Cross-site scripting XSS vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter...

CVE-2008-6094

CVE-2008-6094 is an XSS vulnerability in Celoxis Technologies’ Celoxis product, exploitable via the ni.smessage parameter in the user.do endpoint. The issue allows remote attackers to inject arbitrary web script or HTML. The provided documents identify the affected component and the vulnerable pa...

CVE-2008-6094: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter...

celoxis-xss.txt

==Background== From Celoxis.com: Celoxis is a comprehensive web based project management tool to improve collaboration and streamline management of projects, time sheets, expenses and even business processes specific to your organization ==Problem== The Celoxis project management software contain...

Celoxis - Multiple Cross-Site Scripting Vulnerabilities

Celoxis - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31514/info Celoxis is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scri...

Celoxis - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31514/info Celoxis is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...