Catfish CMS controller/Common.php page has a stored cross-site scripting vulnerability

Catfish catfish CMS is open source PHP content management system. A cross-site scripting vulnerability exists in the Catfish CMS controller/Common.php page. An attacker can insert malicious js code to obtain user cookies and other information, resulting in user hijacking...

Design/Logic Flaw

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused...

CVE-2017-13702

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2017-37091)

Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect versions 9.6.2 and earlier. The vulnerability occurs because the software fails to properly filter HTML code in user-supplied input before displaying it. A remote user ca...

CVE-2017-11879

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability"...

NiuShop open source mall system v1.1.9 suffers from reflective cross-site scripting vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system v1.1.9 reflective cross-site scripting vulnerability exists in the...

WordPress Boozang 1.0.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Boozang Plugin 1.0.0 Boozang Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

WordPress Duplicator Migration 1.2.28 Cross Site Scripting

Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Duplicator a WordPress Migration Plugin 1.2.28 Duplicator a WordPress Migration Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

DEBIAN-CVE-2017-7090

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

Reflective Cross-site Scripting Vulnerability in the CMS Cluster Management System of Guizhou Baishijia Technology Group Co.

The Bioscor CMS Cluster Management System is a content management system. A reflective cross-site scripting vulnerability exists in the Baishijia CMS cluster management system of Guizhou Baishijia Technology Group Corporation, which is due to the system's failure to strictly filter user input...

Stored Cross-Site Scripting Vulnerability in Little Lord App

Little Lord App is a software focused on women's great aunt menstrual period management. Little Master App suffers from a stored cross-site scripting vulnerability, which can be exploited by attackers to insert malicious cross-site code and obtain sensitive information such as administrator cooki...

Stored Cross-site Scripting Vulnerability in the Sunshine Letters and Visits Comprehensive Service Management System of Jiangsu Chuhuai Science and Technology Development Co.

Sunshine Petition Comprehensive Service Management System is a petition information system launched by Jiangsu Chuhuaike Software Technology Development Co. A stored cross-site scripting vulnerability exists in the Sunshine Petition Comprehensive Service Management System of Jiangsu Chuhuaike...

Bumper to bumper shopping app has a logic design flaw

Bumper to Bumper App is an online shopping application. There is a logic design vulnerability in BumperBuy APP. Attackers can register any account, reset any password, insert malicious js code in the personal information page, obtain user cookies and other information through packet bursting...

SAP Enterprise Portal Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a set of enterprise portal based on NetWeaver system platform developed by SAP, which contains content management, single sign-on, knowledge management, collaborative work, full-text search and other modules. A cross-site scripting vulnerability exists in SAP Enterprise...

Cross-Site Scripting Vulnerability in ExtMail Mail System

ExtMail is a mail system launched by Guangzhou Colliers Network Technology Co. A cross-site scripting vulnerability exists in the ExtMail email system. The attacker constructs XSS statements to perform pop-up box operations and obtain user cookies and other information...

Reflected Cross-Site Scripting Vulnerability in MetInfo's login_check.php Page

MetInfo is a Content Management System CMS developed using PHP and Mysql. A reflective cross-site scripting vulnerability exists in the logincheck.php page in MetInfo version 5.3.18. An attacker can construct XSS statements and perform pop-up box operations to obtain user cookies and other...

Stored Cross-Site Scripting Vulnerability in Xiao Zhuge Financial App

Xiao Zhuge Finance APP is a comprehensive Internet financial management platform. Xiao Zhuge Financial APP has a stored cross-site scripting vulnerability, which can be exploited by attackers to insert malicious xxs code and obtain sensitive information such as administrator cookies...

Stored Cross-Site Scripting Vulnerability in Yauen.com App

Youyuan.com APP is a same-city mobile marriage dating software. There is a stored cross-site scripting vulnerability in Yau Yuan APP, which can be exploited by an attacker to insert malicious xss cross-site code and obtain sensitive information such as administrator cookies...

Stored Cross-Site Scripting Vulnerability in Mythical Doctor App

The Mythical Doctor app is a leading doctor-patient type tool in the field of mobile health, dedicated to helping you build an online communication service between you and your doctor, and providing you with medicines to your home. A stored cross-site scripting vulnerability exists in the...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2017-34246)

Cisco Unified Intelligence Center is the management center for the unified communications system of the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center due to the program failing to properly filter user-supplied input. An attacker may...