Multiple Cross-Site Scripting Vulnerabilities in SAP BI Launchpad

SAP BI Launchpad is the gateway to BO4.0, BO4.0 SAP BusinessObjects a German company SAP SAP provides a wide range of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. Multiple cross-site...

Stored Cross-Site Scripting Vulnerability at jeecms Published Articles

JEECMS is a content management system developed by Jiangxi Jinlei Technology Development Co., Ltd. that supports WeChat applet, WeChat public number/service number, column model, cross-customization of content model, as well as with payment and financial settlement. A stored cross-site scripting...

SAP BusinessObjects Web Intelligence Cross-Site Scripting Vulnerability

SAP BusinessObjects Germany SAP SAP a company provides a variety of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. A cross-site scripting vulnerability exists in SAP BusinessObjects Web...

SAP NetWeaver Composite Application Framework and Business Cross-Site Scripting Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting attack vulnerability exists in SAP NetWeaver, which stems from a failure to adequately...

Cross-site Scripting and SQL Injection Vulnerabilities in YiiCMS

YiiCMS is a backend basic content management system written based on yii2. YiiCMS suffers from a cross-site scripting and SQL injection vulnerability, which is due to the system failing to effectively filter user input. An attacker can exploit this vulnerability to insert malicious cross-site cod...

Drupal Site Verify Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site footing vulnerability exists in the Drupal Site Verify module, which stems from the program failing to adequately validate user input. An attacker can exploit...

Oracle Primavera P6 Enterprise Project Portfolio Management HTTP Response Splitting

Exploit Title: Oracle Primavera P6 Enterprise Project Portfolio Management HTTP Response Splitting Date: 16-02-2018 Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC Vendor Homepage: https://www.oracle.com Affected Software: Oracle Primavera P6...

Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting

Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting Exploit Title: Oracle Primavera P6 Enterprise Project Portfolio Management HTTP Response Splitting Date: 16-02-2018 Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis -...

Stored XSS Vulnerability in zzzcms

zzcms is a free website builder developed in asp language. There is a stored XSS vulnerability in zzzcms. The vulnerability occurs because zzzcms does not add a filtering mechanism when obtaining ip, an attacker can exploit the vulnerability to construct cross-site statements and obtain sensitive...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2018-05522)

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware 15.2...

Cross site scripting

tiki wiki cms groupware =15.2 has a xss vulnerability, allow attackers steal user's cookie...

CVE-2016-7394

tiki wiki cms groupware =15.2 has a xss vulnerability, allow attackers steal user's cookie...

CVE-2016-7394

tiki wiki cms groupware =15.2 has a xss vulnerability, allow attackers steal user's cookie...

CVE-2016-7394

The vulnerability CVE-2016-7394 affects Tiki Wiki CMS Groupware

IPSwitch MOVEit 8.1 < 9.4 - Cross-Site Scripting

Exploit Title: IPSwitch MoveIt Stored Cross Site Scripting XSS Date: 1-31-2017 Software Link: https://www.ipswitch.com/moveit Affected Version: 8.1-9.4 only confirmed on 8.1 but other versions prior to 9.5 may also be vulnerable Exploit Author: 1N3@CrowdShield - https://crowdshield.com Early...

IPSwitch MoveIt 9.4 Cross Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: IPSwitch MoveIt Stored Cross Site Scripting XSS Software Link: https://www.ipswitch.com/moveit Affected Version: 8.1-9.4 only confirmed on 8.1 but other versions prior to 9.5 may also be vulnerable Exploit Author: email protecte...

Reflective Cross-site Scripting Vulnerability in YUNUCMS v1.0.6 Frontend

YUNUCMS is a three-network, open source content management system with its own substation system. A reflective cross-site scripting vulnerability exists in the frontend of YUNUCMS v1.0.6. The attacker constructs XSS statements and performs pop-up box operations to obtain user cookies and other...

Stored Cross-site Scripting Vulnerability in QYKCMS Frontend lib_post.php Page

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. A stored cross-site scripting vulnerability exists in the QYKCMS frontend libpost.php page. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading...

Cross-Site Scripting Vulnerability in Daimi CMS v5.5.3

DAMI CMS is a free open source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smart phone station solutions. A cross-site scripting vulnerability exists in version V5.5.332017-04-15 of DAMI CMS, whic...

Stored Cross-Site Scripting Vulnerability in DuxCms Frontend

DuxCms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. DuxCms frontend has a stored cross-site scripting vulnerability. Attackers can insert malicious js code in the front page to get user cookies and other...