CVE-2014-9501

The CVE concerns the Drupal Poll Chart Block module (Drupal 7.x, versions prior to 7.x-1.2). The issue is an XSS vulnerability caused by insufficient sanitization of poll node titles displayed in the poll chart block, allowing remote authenticated users to inject arbitrary script/HTML. Affected p...

DEBIAN-CVE-2014-9450

Multiple SQL injection vulnerabilities in chartbar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the 1 itemid or 2 periods parameter...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09219)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote, authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09218)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7267

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

Cross site scripting

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

Cross site scripting

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7268

CVE-2014-7268 is a cross-site scripting (XSS) vulnerability in the data-export feature of the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting version 7.8.1 and earlier. The reported issue injects arbitrary web script/HTML via unspecified vectors. The provided sources do not specify the underl...

CVE-2014-7267

CVE-2014-7267 is an XSS in the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting versions up to 7.8.1 and earlier. The vulnerability resides in the output-page generator component, where unsanitized input can allow remote authenticated users to inject arbitrary script or HTML via unspecified ve...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7267

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Note that this vulnerability is...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in output page generation, which may lead to cross-site scripting CWE-79. Note that this vulnerability i...

JVN#09289074: WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in output page generation, which may lead to cross-site scripting CWE-79. Impact An arbitrary script may be...

JVN#76515134: WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Impact An arbitrary script may be executed on t...

SA-CONTRIB-2014-124 - Poll Chart - Cross Site Scripting (XSS)

This module enables users to have a block displaying the result of the last poll as a chart. The module doesn't sufficiently sanitize poll node titles when displaying the block. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create polls and t...

SEO Watcher - Open Flash Chart Arbitrary File Creation

The seo-watcher WordPress plugin was affected by an Open Flash Chart Arbitrary File Creation security vulnerability...

SlimStat-Ex - Open Flash Chart Arbitrary File Creation

The wp-slimstat-ex WordPress plugin was affected by an Open Flash Chart Arbitrary File Creation security vulnerability...

phpBB Chart Mod 1.1 charts.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...