WordPress booking-calendar plugin cross-site scripting vulnerability (CNVD-2018-01251)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A cross-site scripting vulnerability exists ...

Cross-site scripting vulnerability in the member.php page of UQCMS cloud commerce system

UQCMS cloud business system is a B2B2C e-commerce software that the program uses PHP+MYSQL and the template uses smarty. The UQCMS member.php page contains a cross-site scripting vulnerability that can be exploited by attackers to insert malicious code to pop-up boxes and obtain user cookies and...

WordPress tabs-responsive plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site. tabs-responsive plugin is used in which a tab to add plug-ins. A cross-site scripting vulnerability exists in...

WordPress Easy Custom Auto Excerpt Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Easy Custom Auto Excerpt plugin is used in one of the document collection plugin. A cross-site scripting...

Stored Cross-Site Scripting Vulnerability in HYBBS v2.0

HYBBS is a MVC-structured program based on HYPHP framework. A stored cross-site scripting vulnerability exists in HYBBS v2.0. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijacking...

Red Hat CloudForms HTML Injection Vulnerability

Red Hat CloudForms is a suite of IaaS Infrastructure as a Service cloud service solutions from Red Hat, Inc. The solution creates and manages private and public clouds and has the ability to manage the application lifecycle. An HTML injection vulnerability exists in Red Hat CloudForms, which stem...

Reflective Cross-Site Scripting Vulnerability in TRS MAS infogate Plugin of Beijing Tops Information Technology Co.

TRS MAS is a universal media management system based on the characteristics of audio and video usage in the mobile Internet era. There is a reflective cross-site scripting vulnerability in the TRS MAS infogate plugin of Beijing Tops Information Technology Co. The vulnerability is due to the...

TYPO3 Formhandler extension cross-site scripting vulnerability (CNVD-2018-01373)

TYPO3 is a Swiss TYPO3 Association maintains a free and open source content management system framework CMS/CMF. formhandler is one of the Web development form Form module extension plug-in . A cross-site scripting vulnerability exists in the TYPO3 Formhandler extension. As the program fails to...

Cross-Site Scripting Vulnerability in TRS MAS of Beijing Tops Information Technology Co.

TRS MAS is a universal media management system based on the characteristics of audio and video usage in the mobile Internet era. The same audio and video resources can be provided for different terminal platforms, effectively saving costs and simplifying operations. TRS MAS has a cross-site...

TYPO3 Recommend Page Extension Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the TYPO3 Recommend Page extension due to the program failing to properly filter user-supplied input. An attacker could use the...

Cross-Site Request Forgery Vulnerability in ECshop

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECshop cross-site request forgery...

Apache Drill Cross-Site Scripting Vulnerability

Apache Drill is a schema-less SQL query engine for Hapood, NoSQL and cloud storage from the Apache Apache Software Foundation. The product supports a variety of NoSQL databases and file systems , including HBase, MongoDB, MapR-DB, HDFS and MapR-FS and so on. A cross-site scripting vulnerability...

Techno - Portfolio Management Panel Cross-Site Scripting Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A cross-site scripting vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the...

Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A reflective cross-site scripting vulnerability exists in ZZCMS version 8.1. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other information...

Multiple Vulnerabilities in Yunyou CMS Enterprise Website Management System

Yunyou CMS enterprise website management system is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A file upload and reflective cross-site scripting vulnerability exists in the CloudUnion CMS enterprise website management system. The vulnerability...

WordPress Crowd Ideas 1.0 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Crowd Ideas 1.0 Crowd Ideas is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

b3log Symphony cross-site scripting vulnerability (CNVD-2017-38345)

b3log Symphony aka Sym is an open source set of modern community platforms written in the Java language, including forums, BBS, SNS and blogs. A cross-site scripting vulnerability exists in b3log Symphony version 2.2.0. A remote attacker can exploit this vulnerability to obtain a user cookie by...

Reflective cross-site scripting vulnerability in Zendo Project Management Software (open source version) jump page

Zendo is an open source project management software. A reflective cross-site scripting vulnerability exists in the jump page of Zendo project management software open source version. An attacker can construct XSS statements and perform pop-up box operations to obtain user cookies and other...

MOXA EDS-G512E Information Disclosure Vulnerability

Moxa EDS-G512E is an Ethernet switch device from Moxa. A security vulnerability exists in the MOXA EDS-G512E version 5.1 build 16072215. An attacker can exploit the vulnerability to steal, manipulate, and reuse cookies...

Adobe Experience Manager Cross-Site Scripting Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...