HCL Technologies AppScan Source Cross-Site Scripting Vulnerability

HCL Technologies AppScan Source is a static application security testing solution from HCL Technologies India. A cross-site scripting vulnerability exists in HCL Technologies AppScan Source. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An...

Backdrop CMS Cross-Site Scripting Vulnerability (CNVD-2020-03709)

Backdrop CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in Backdrop CMS version 1.13.x before 1.13.5 and version 1.14.x before 1.14.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker...

Intesync Solismed Cross-Site Scripting Vulnerability

Intesync Solismed is a clinic management system designed for use by independent and free clinics. A cross-site scripting vulnerability exists in Intesync Solismed. An attacker can exploit this vulnerability to execute client-side code...

statusnet cross-site scripting vulnerability (CNVD-2020-04299)

statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in versions of statusnet prior to 0.9.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...

Avaya IP Office Application Server WebUI Component Cross-Site Scripting Vulnerability

Avaya IP Office Application Server is an application server from the American company Avaya. A cross-site scripting vulnerability exists in the WebUI component of IP Office Application Server version 11.x. The vulnerability stems from a lack of proper validation of client-side data in the WEB...

WordPress Scoutnet Kalender Cross-Site Scripting Vulnerability

WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.Scoutnet Kalender is one of the calendar plugins. A cross-site scripting vulnerability exists in version 1.1.0 of the WordPre...

DAViCal CalDAV Server Cross-Site Scripting Vulnerability

DAViCal is a calendar sharing server that is an implementation of the CalDAV protocol. A cross-site scripting vulnerability exists in DAViCal CalDAV Server version 1.1.8 and earlier. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker can...

AntiDisposmail - Detecting Disposable Email Addresses

Antbot.pw provides a free, open API endpoint for checking a domain or email address against a frequently-updated list of disposable domains. CORS is enabled for all originating domains, so you can call the API directly from your client-side code. GET https://antibot.pw/api/[email protected]...

Cloudera Manager Cross-Site Scripting Vulnerability (CNVD-2020-14237)

Cloudera Manager is a suite of Hadoop data management software from Cloudera. The software supports creating clusters, authentication, data backup and recovery, and more. A cross-site scripting vulnerability exists in Cloudera Manager versions prior to 5.4.3. The vulnerability stems from the WEB...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-44257)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A cross-site scripting vulnerability exists in FusionPBX. The vulnerability stems from the...

Siemens Polarion webclient cross-site scripting vulnerability (CNVD-2019-44254)

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

Siemens Polarion webclient Cross-Site Scripting Vulnerability

Siemens Polarion is a suite of application lifecycle management software from Siemens, Germany. The software supports end-to-end enterprise application development in a unified, modular, browser-based software environment. webclient is one of the web-based client programs. A cross-site scripting...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2019-45129)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr CRM/ER...

NSSLGlobal Technologies SatLink VSAT Modem Unit Cross-Site Scripting Vulnerability

The NSSLGlobal Technologies SatLink VSAT Modem Unit VMU is a VSAT Very Small Aperture Terminal modem from NSSLGlobal Technologies. A cross-site scripting vulnerability exists in the web interface in NSSLGlobal Technologies SatLink VMU versions prior to 18.1.0. The vulnerability stems from a lack ...

CVE-2019-15652

The web interface for NSSLGlobal SatLink VSAT Modem Unit VMU devices before 18.1.0 doesn't properly sanitize input for error messages, leading to the ability to inject client-side code...

CVE-2019-15652

The web interface for NSSLGlobal SatLink VSAT Modem Unit VMU devices before 18.1.0 doesn't properly sanitize input for error messages, leading to the ability to inject client-side code...

CVE-2019-15652

The CVE-2019-15652 entry concerns the web interface of NSSLGlobal SatLink VSAT Modem Unit (VMU). A vulnerability in the VMU web UI prior to version 18.1.0 arises from inadequate sanitization of input in error messages, enabling injection of client-side code (XSS) via crafted input. Documents cons...

Matomo Cross-Site Scripting Vulnerability

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from the WEB application w failing to properly validate client-side data. An attacker can exploit the vulnerability to...

matomo cross-site scripting vulnerability (CNVD-2019-42239)

matomo is an open source web analytics application based on PHP and MySQL. A cross-site scripting vulnerability exists in matomo versions prior to 1.10.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabilit...

Statusnet Cross-Site Scripting Vulnerability

statusnet is an open source micro-blogging program written in PHP. A cross-site scripting vulnerability exists in the content of error messages in statusnet 2010 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...