ilchCMS Cross-Site Scripting Vulnerability (CNVD-2020-19202)

ilch CMS is a content management system that provides a basic system that is easily extensible. A cross-site scripting vulnerability exists in ilchCMS, which can be exploited by an attacker to execute client-side code...

ilchCMS Cross-Site Scripting Vulnerability

ilch CMS is a content management system that provides a basic system that is easily extensible. A cross-site scripting vulnerability exists in ilchCMS, which can be exploited by an attacker to execute client-side code...

NETSAS Enigma NMS Cross-Site Scripting Vulnerability (CNVD-2020-18995)

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A cross-site scripting vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2020-21240)

CMS Made Simple CMSMS is an open source content management system CMS from the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in Filemanager...

McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-21065)

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee Network Security Management 9.1 and prior version...

Contao Cross-Site Scripting Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . A cross-site scripting vulnerability exists in Contao versions prior to 4.5.7, which stems from a lack of proper validation of client-side data by...

SAP Commerce Cross-Site Scripting Vulnerability (CNVD-2020-21059)

SAP Commerce is a cloud-based e-commerce platform from SAP, a German company. The product supports sales management, marketing management, order management and operations management , etc. SmartEdit Extension is one of the smart editor extension program . A cross-site scripting vulnerability exis...

Team Password Manager Cross-Site Scripting Vulnerability

Team Password Manager is a web-based team password manager. A cross-site scripting vulnerability exists in Team Password Manager 7.93.204 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19905)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of...

cPanel cross-site scripting vulnerability (CNVD-2020-19891)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 82.0.18. The vulnerability stems from a lack of proper...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-18398)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

cPanel Cross-Site Scripting Vulnerability (CNVD-2020-19904)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 84.0.20. The vulnerability stems from a lack of proper...

Wyse Management Suite Cross-Site Scripting Vulnerability (CNVD-2020-17378)

Wyse Management Suite WMS is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A cross-site scripting vulnerability exists in Wyse Management Suite versions...

PrimeTek PrimeFaces Cross-Site Scripting Vulnerability

Primetek Primefaces is an open source use in the Java EE system UI library . A cross-site scripting vulnerability in the tooltip/tooltip.js file in PrimeTek PrimeFaces version 7.0.11, which stems from a lack of proper validation of client-side data in a WEB application, can be exploited by an...

LimeSurvey cross-site scripting vulnerability (CNVD-2020-21079)

LimeSurvey formerly known as PHPSurveyor is a set of open source online questionnaire survey program from the LimeSurvey team, which supports survey program development, questionnaire distribution, and data collection. A cross-site scripting vulnerability exists in LimeSurvey version 3.17.7+19062...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-17384)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions 12.1 through 12.8.1, which stems fro...

GitLab Cross-Site Scripting Vulnerability (CNVD-2020-17385)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab versions 12.1 through 12.8.1. The vulnerabili...

Chadha Software Technologies PHPKB Standard Multi-Language article.php Cross-Site Scripting Vulnerability

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site scripting vulnerability exists in the way the Referer header is handled in the article.php file in Chadha Software...

Chadha Software Technologies PHPKB Standard Multi-Language Cross-Site Scripting Vulnerability (CNVD-2020-17949)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A cross-site scripting vulnerability exists in the way URIs are handled in the admin/header.php file in Chadha PHPKB Standard...

ABB eSOMS Cross-Site Scripting Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. A cross-site scripting vulnerability exists in ABB eSOMS 6.0.2 and prior versions. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerabilit...