PHP Scripts Mall API Based Travel Booking Cross Site Scripting Vulnerability

PHP Scripts Mall API Based Travel Booking is an online travel booking system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall API Based Travel Booking version 3.4.7, which can be exploited by an attacker to execute client-side code...

Joruri CMS Cross-Site Scripting Vulnerability

Joruri CMS is a Ruby-based content management system CMS. A cross-site scripting vulnerability exists in Joruri CMS 2017 Release2 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to...

Geutebrück G-Cam and G-Code Cross-Site Scripting Vulnerabilities

G-Cam is a series of webcams from Geutebrück.G-Code is an analog video encoder from Geutebrück. A cross-site scripting vulnerability exists in Geutebrück G-Cam and G-Code. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker can exploit the...

ZOHO ManageEngine ServiceDesk Plus Cross-Site Scripting Vulnerability (CNVD-2019-16592)

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. A cross-site scripti...

Quest Software Kace K1000 Appliance Cross-Site Scripting Vulnerability

Quest Software Kace K1000 Appliance is a system management appliance from Quest Software, USA. The product is used for software license management, patch and endpoint security management, software distribution and server monitoring functions. A cross-site scripting vulnerability exists in Quest...

Zimbra Collaboration Server Cross-Site Scripting Vulnerability

Zimbra Collaboration Server ZCS is a suite of email and collaboration solutions from Zimbra, USA. The solution provides email, contacts, calendaring, file sharing, social networking, and more. A cross-site scripting vulnerability exists in the admin console in version 8.x of Zimbra ZCS prior to...

Apcupsd Cross-Site Scripting Vulnerability

pfSense is a set of network firewalls based on FreeBSD Linux. apcupsd is one of the uninterruptible power supply daemons. A cross-site scripting vulnerability exists in the apcupsdstatus.php file in Apcupsd version 0.3.915 in pfSense 2.4.4-RELEASE-p3 and earlier versions and other products. The...

Samsung SCX-824 Cross-Site Scripting Vulnerability

The Samsung SCX-824 is a multifunction printer from Samsung South Korea. A cross-site scripting vulnerability exists in the Samsung SCX-824. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

WordPress ZOHO SalesIQ Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ZOHO SalesIQ is a live chat customer support plugin used in it. A cross-site scripting vulnerability exists in WordPress ZOHO SalesIQ...

Eventum Cross-Site Scripting Vulnerability

Eventum is a defect tracking system. The system is used to track inbound technical support, organizational tasks, bugs, etc. A cross-site scripting vulnerability exists in the /htdocs/postnote.php file in Eventum version 3.5.0. The vulnerability stems from a lack of proper validation of client-si...

PrestaShop cross-site scripting vulnerability (CNVD-2019-16479)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the 'shopcountry' parameter of the...

VFront Cross-Site Scripting Vulnerability

VFront is a set of PHP and Javascript written for MySQL or PostgreSQL database open source front-end management tools . A cross-site scripting vulnerability exists in Vfront version 0.99.5. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-15675)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite 7.8.4 and earlier versions. The vulnerabili...

EmpireCMS Cross-Site Scripting Vulnerability

EmpireCMS Empire Content Management System is an open source content management system CMS. A cross-site scripting vulnerability exists in EmpireCMS version 7.5.0, which can be exploited by an attacker to execute client-side code...

EmpireCMS cross-site scripting vulnerability (CNVD-2019-16391)

EmpireCMS Empire Content Management System is an open source content management system CMS. A cross-site scripting vulnerability exists in EmpireCMS version 7.5.0, which can be exploited by an attacker to execute client-side code...

CVE-2019-11875

In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...

Schneider Electric TSXETG100 Cross-Site Scripting Vulnerability

The Schneider Electric TSXETG100 is an Ethernet gateway device from Schneider Electric France. A cross-site scripting vulnerability exists in the Schneider Electric TSXETG100. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker could exploit...

Shave Cross-Site Scripting Vulnerability

Shave is a Javascript plugin that can truncate multiple lines of text according to the set number of pixels max-height. A cross-site scripting vulnerability exists in versions prior to Shave 2.5.3, which can be exploited by attackers to execute client-side code...

ProjectSend cross-site scripting vulnerability (CNVD-2019-36883)

ProjectSend formerly known as cFTP is a suite of self-hosted applications based on PHP and MySQL. A cross-site scripting vulnerability exists in the 'Name' field of the My Account page in versions prior to ProjectSend r1053. The vulnerability stems from the WEB application's lack of proper...

Mozilla Firefox Cross-Site Scripting Vulnerability (CNVD-2019-15665)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Mozilla Firefox versions prior to 67, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit thi...