xss vulnerability in Ar***.php of LaySNS lightweight content community system of Wuhan Classen Technology

LaySNS is a lightweight, integrated content management and community interaction website management system based on ThinkPHP+Layui architecture. An xss vulnerability exists in Ar.php in the LaySNS lightweight content community system of Wuhan Classen Technology. The vulnerability stems from the...

Jfinal cms xss vulnerability at frontend user profile

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability in frontend registry

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend article

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Jfinal cms xss vulnerability at frontend comments

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

xss vulnerability in the profile area of cityleague's website builder system

City Union is a local portal alliance website organized by Beijing City Union Technology Co. There is an xss vulnerability in the profile area of the Cities Alliance website builder system, which can be exploited by attackers to insert malicious js code into the page, obtain user cookies and othe...

NetSoft Zhicheng classifieds website system suffers from xss vulnerability

NetSoft Zhicheng classifieds website system is a php mysql based website building system. A xss vulnerability exists in Netsoft Zhicheng Classifieds Website System, which can be exploited by an attacker to obtain an administrator's cookie...

Stored cross-site scripting vulnerability in WODECMS front-end ne***.cl***.php file

WODECMS is a content management system developed based on a self-developed PHP development framework. A stored cross-site scripting vulnerability exists in the WODECMS front-end ne.cl.php file. An attacker can insert malicious js code into the page to obtain user cookies and other information,...

City Union website building system message platform exists xss vulnerability

City Union is a local portal alliance website organized by Beijing City Union Technology Co. City Union forum system message platform there are xss vulnerabilities, attackers use loopholes in the page to insert malicious js code, access to user cookies and other information, resulting in user...

iWebShop open source mall system has xss vulnerability

iWebShop is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source mall system . iWebShop has an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

PHPMyWind data/api/oauth/connect.php reflective cross-site scripting vulnerability

PHPMyWind is a PHP + MySQL based development , W3C standard building engine . A reflective cross-site scripting vulnerability exists in PHPMyWind data/api/oauth/connect.php. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

OLX: XSS inside HTML Link Tag

Hello, i discovered XSS in sharjah.dubizzle.com. XSS is reflected inside HTML Link tag so it need some condition to trigger the payload. Step to Reproduce - Visit https://sharjah.dubizzle.com/property-for-sale/land" accesskey="X" onclick=alert1337...

74cms v4.2.111 xss vulnerability in enterprise profile management page

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms v4.2.111 enterprise data management page there are xss vulnerabilities , attacker...

DhCms Cross-Site Scripting Vulnerability

DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in the admin.php?r=admin/Index/index backend in DhCms 2017-09-18 and earlier versions. A remote attacker can exploit this vulnerability to obtain cookie information...

WordPress Plugin YOP Poll Reflective Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the WordPress plugin YOP Poll, which allows an attacker to construc...

Multiple Cross-Site Scripting Vulnerabilities in Ericsson Active Library Explorer

Ericsson Active Library Explorer is server-based software that allows users to browse Ericsson document libraries and documents using a standard Web browser. Ericsson Active Library Explorer has multiple cross-site scripting vulnerabilities. Due to the program failing to adequately filter...

WordPress Plugin WP Live Chat Support Reflective Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers running PHP and MySQL.WP Live Chat Support is one of the components that supports live chat. WordPress plugin WP Live Chat Support...

CVE-2018-1948

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes...

XSS Vulnerability in Hanshen CMS

Hanshen CMS Hanshen Web Management System is a content management system CMS. An XSS vulnerability exists in Hanshen CMS, which can be exploited by attackers to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in the Daimi CMS da***.me***.php File (CNVD-2019-06660)

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A stored cross-site scripting vulnerability exists in the dam.mem.php file of the Dami CMS. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading ...