Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability

ELOG is a web application written in C for creating personal and general logs. A cross-site scripting vulnerability exists in ELOG version 3.1.4. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute...

CVE-2019-20183

uploadimage.php in Employee Records System 1.0 allows upload and execution of arbitrary PHP code because file-extension validation is only on the client side. The attacker can modify global.js to allow the .php extension...

CVE-2019-14918

XSS in the DHCP lease-status table in Billion Smart Energy Router SG600R2 Firmware v3.02.rc6 allows an attacker to inject arbitrary HTML/JavaScript code to achieve client-side code execution via crafted DHCP request packets to etcro/web/internet/dhcpcliinfo.asp...

WordPress awesome-support cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-support is a helpdesk and ticketing system plugin used in it. A cross-site scripting vulnerability exists in WordPress...

PrestaShop cross-site scripting vulnerability (CNVD-2020-02542)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop version 1.7.6.2. The...

X (Formerly Twitter): Bypass Password Authentication for updating email and phone number - Security Vulnerability

Summary: Additional requirement for authentication is an extra layer of security for a person's Twitter account. Instead of only entering the password at the time of log in, twitter further Introduces additional layer of security by prompting users to enter their password before attempting to...

seeftl cross-site scripting vulnerability

seeftl is a static server for previewing ftl files. A cross-site scripting vulnerability exists in seefl version 0.1.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

Dairy Farm Shop Management System Cross-Site Scripting Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A cross-site scripting vulnerability exists in Dairy Farm Shop Management System version 1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker...

WatchGuard XMT515 Cross-Site Scripting Vulnerability

WatchGuard XMT515 is a firewall router product from WatchGuard USA. A cross-site scripting vulnerability exists in WatchGuard XMT515 version 12.1.3 and earlier. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the...

Mozilla Firefox and Mozilla Firefox ESR Cross-Site Scripting Vulnerability (CNVD-2020-01175)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A cross-site scripting vulnerability exists in Mozilla Firefox ESR versions prio...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-01236)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab. Th...

IceWarp WebMail Server Cross-Site Scripting Vulnerability

IceWarp WebMail Server is a Web-based mail server product from the U.S. company IceWarp. The product supports email archiving, SmartAttach attachments, automatic migration and more. A cross-site scripting vulnerability exists in IceWarp WebMail Server version 12.2.0 and version 12.1.x prior to...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2020-03028)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange App Suite 7.10.2 and prior versions. The vulnerability...

ZenPhoto cross-site scripting vulnerability (CNVD-2020-03272)

ZenPhoto is a free content management system for photo libraries. The system manages images and supports multimedia such as audio and video. A cross-site scripting vulnerability exists in Zenphoto versions prior to 1.4.9. The vulnerability stems from a lack of proper validation of client-side dat...

Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04725)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the Load Plugins field of the config.php page in version 3.67 of SiT! The vulnerability stems from a lack of proper validation of client-side data i...

WordPress Video Comments Webcam Recorder Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Video Comments Webcam Recorder is a video capture plugin used in... A cross-site scripting vulnerability exists in the...

WordPress Movies Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Movies is a movie and video library management plugin used in it. A cross-site scripting vulnerability exists in WordPress Movies 0.6 a...

Sylius Cross-Site Scripting Vulnerability

Sylius is a set of Symfony framework based on open source e-commerce platform . A cross-site scripting vulnerability exists in Sylius. The vulnerability stems from the lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute...

WordPress Easy Career Openings Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy Career Openings is a plugin for job search and recruitment sites. A cross-site scripting vulnerability exists in WordPress Easy...

WordPress Podcast Channels Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Podcast Channels is a plugin for building podcast sites. A cross-site scripting vulnerability exists in WordPress Podcast Channels 0.20...