CoverCMS Cross-Site Scripting Vulnerability

CoverCMS is a content management system CMS. The system features multi-content distribution, scalability and multi-content type support. A cross-site scripting vulnerability exists in CoverCMS version 1.1.6. A remote attacker can exploit this vulnerability to obtain cookies from live users of the...

Hefei Zhengjie Information Consulting Co., Ltd. hotel station building system suffers from cross-site scripting vulnerabilities

Hefei Zhengjie Information Consulting Co., Ltd. is mainly engaged in business travel services such as hotel booking, air ticket booking and visa abroad. A cross-site scripting vulnerability exists in the hotel builder system of Hefei Zhengjie Information Consulting Co. An attacker can insert...

Atlassian Jira Mail.ru Calendar plugin cross-site scripting vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is mainly used to track and manage all kinds of issues and defects in the workplace.Mail.ru Calendar plugin is one of the calendar plugins. A cross-site scripting vulnerability exists in Atlassian Jira...

Atlassian Jira Artezio Kanban Board Plugin Cross-Site Scripting Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace.Artezio Kanban Board plugin is one of the tools used to plan, manage, monitor and review the work of the team. A cross-site...

Stored Cross-Site Scripting Vulnerability in ZZCMS Version 8.2

zzcms is a free website builder developed in asp language. A stored cross-site scripting vulnerability exists in the show.php file of zzcms version 8.2, which allows an attacker to insert malicious code into the page to obtain information such as user cookies...

WolfCMS Cross-Site Scripting Vulnerability (CNVD-2018-07056)

Wolf CMS is a lightweight content management system written in PHP. A stored cross-site scripting vulnerability exists in WolfCMS 0.8.3.1 in the Layout Name under the Layout tab. A low-privileged user can exploit this vulnerability to steal cookies from administrative users and compromise the...

CVE-2018-1000084

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name from Layout tab that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the...

Random multifunctional message board cms has XSS vulnerability

Random Multifunctional Message Board is a multifunctional message board system developed by php+MySQL. Casual multifunctional message board cms there are XSS vulnerabilities , attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

QCMS cross-site scripting vulnerability (CNVD-2018-06392)

QCMS is an open source content management system CMS for creating responsive websites. A cross-site scripting vulnerability exists in QCMS version 3.0. A remote attacker can exploit this vulnerability by sending the 'title' parameter to the /guest/index.html URI to obtain a user cookie...

Jspxcms has an XSS vulnerability

jspxcms is an open source, Java-based content management system CMS. Jspxcms suffers from an XSS vulnerability, which is due to the system failing to strictly filter user input information. An attacker can exploit this vulnerability to insert XSS execution code to directly trigger pop-up window...

CVE-2018-6529

XSS vulnerability in htdocs/webinc/js/bscsmsinbox.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn...

Stored Cross-Site Scripting Vulnerability at jeecms Modify Profile

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content management system. jeecms modified...

Cross-Site Scripting Vulnerability in EasySNS V1.6 Frontend

ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of cross-site scripting vulnerabilities, attackers ca...

Cross-Site Scripting Vulnerability in LaySNS v2.2.0

LaySNS Light Community is a comprehensive website system based on ThinkPHP5+LayUI that integrates content publishing and community exchange. LaySNS v2.2.0 suffers from a cross-site scripting vulnerability in the program implementation, which is due to the system's failure to strictly filter...

EduaskCMS v1.0.7 Cross-site Scripting Vulnerability in Frontend

EduaskCMS is a free and open source content management system based on ThinkPHP 5.0.14+layui2.2.5 framework. EduaskCMS v1.0.7 frontend has a cross-site scripting vulnerability in the program implementation, the vulnerability is due to the system fails to adequately filter the incoming parameters...

Multiple Cross-Site Scripting Vulnerabilities in Symantec Management Console

Symantec Management Console is Symantec's web-based user interface for managing Symantec Management Platform and other installed solutions. Symantec Management Console has multiple cross-site scripting vulnerabilities that stem from the program failing to properly validate user input. An attacker...

Drupal Search 404 Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Search 404 is one of the modules that searches for keywords in the URL. A cross-site scripting vulnerability exists in the Drupal Search 404 module, which stems from the program failing...

Stored Cross-Site Scripting Vulnerability in iZhanCMS Version v2.1

Love Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 version of the stored cross-site scripting vulnerability, attackers can use the vulnerability in the page to insert malicious js code, to obtain user cookies and other information...

XSS Vulnerability in FineCMS Version 5.3.0

FineCMS Free, Enterprise, Public Benefit is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An XSS vulnerability exists in FineCMS version 5.3.0, which stems from insufficient filtering of received parameters, and can be exploited by remot...

Magento CMS Admin Panel HTML Injection Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. An HTML injection vulnerability exists in Magento CMS. An attacker can exploit the vulnerability to execute arbitrary script code on the browsers of affected website users, steal...