Glassdoor: Reflected XSS at https://www.glassdoor.co.in/Job/pratt-whitney-jobs-SRCH_KE0,13.htm?initiatedFromCountryPicker=true&countryRedirect=true

Summary: There is a reflected XSS vulnerability in https://www.glassdoor.co.in/Job/pratt-whitney-jobs-SRCHKE0,13.htm?initiatedFromCountryPicker=true&countryRedirect=true Vulnerability Type: Reflected XSS Browsers tested: Chrome, Firefox Payload:...

Mitel MiVoice Connect Client Remote Code Execution Vulnerability

Mitel MiVoice Connect is Mitel Networks Canada's software for centralized management of Mitel Networks' call handling and collaboration tools. A remote code execution vulnerability exists in Mitel MiVoice Connect client versions prior to 214.100.1223.0. The vulnerability is related to the affecte...

PT-2020-6836 · Ibm · Ibm Rational Change

Name of the Vulnerable Software and Affected Versions: IBM Rational Change version 5.3 Description: The issue is caused by improper validation of user-supplied input, leading to cross-site scripting. A remote attacker could exploit this using the SUPP TEMPLATE FLAG parameter in a specially-crafte...

CVE-2020-12456

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform...

CVE-2019-4688

IBM Security Guardium Data Encryption GDE 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...

Remote code execution

A remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could allow an attacker to execute arbitrary code in the chat notification window, due to improper rendering of chat messages. A successful exploit could allow an attacker to steal session cookies, perform...

XSS vulnerability in Yixing YiFa cms

Yixing Yifa Network Service Co., Ltd. is a company that provides Internet solutions for enterprises, providing a variety of information products and services, such as website construction, WeChat public platform, WeChat marketing, website promotion, website maintenance and operation, domain name...

CVE-2020-24609

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie v...

Cross site scripting

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie v...

CVE-2020-24609

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie v...

CVE-2020-24609

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie v...

PT-2020-15764 · Savsoft · Savsoft Quiz

Name of the Vulnerable Software and Affected Versions: Savsoft Quiz versions 5.5 and earlier Description: The issue allows an attacker to inject a malicious payload in the User Registration section. When the admin visits the manage user section from the admin panel, the payload triggers, enabling...

WordPress Fancybox Lightbox Cross-Site Scripting Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A cross-site scripting vulnerability exists in WordPress Fancybox Lightbox. An attacker can...

Savsoft Quiz 5 - Stored Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Savsoft Quiz 5 - Stored Cross-Site Scripting Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Windows 10...

PT-2020-13974 · Ovirt · Ovirt

Name of the Vulnerable Software and Affected Versions: ovirt versions 4.4 and earlier Description: A flaw was found in Ovirt Engine's web interface where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker t...

Savsoft Quiz 5 - Stored Cross-Site Scripting

Exploit Title: Savsoft Quiz 5 - Stored Cross-Site Scripting Date: 2020-07-28 Exploit Author: Mayur Parmarth3cyb3rc0p Vendor Homepage: https://savsoftquiz.com/ Software Link: https://github.com/savsofts/savsoftquizv5.git Version: 5.0 Tested on: Windows 10 Contact:...

XSS Vulnerability in LAYUI MINI Backend Admin Template

LAYUI MINI backend administration template is a set of the most simple and easy to use backend framework template based on Layui. LAYUI MINI backend administration template has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS vulnerability in Linqing AYi Network Technology website building system

Linqing City, A Yi network technology is committed to website construction services. Linqing City, A easy network technology station building system there are XSS vulnerabilities, attackers can take advantage of the vulnerability to obtain sensitive information such as user cookies...

Guangdong Boon Network Co., Ltd. website building system suffers from xss vulnerability (CNVD-2020-48541)

Guangdong Boon Network Co., Ltd hereinafter referred to as: "Boon" was founded in July 2008, 2016 was named national high-tech enterprises, the company has more than ten professional technology research and development personnel, headquartered in Shiqi District, Zhongshan City. Guangdong Boon...

Zhengzhou Pingtougou Culture Communication Co., Ltd. mall-type website building system suffers from XSS vulnerabilities

Zhengzhou Pinto Culture Communication Co., Ltd. was founded in December 2018, and its business scope includes conference and exhibition services, computer software and hardware development. Zhengzhou Pingtougou Cultural Communication Co. Ltd. mall-type website building system has an XSS...