Reflective Cross-Site Scripting Vulnerability in AliMom RAP

AliMom RAP is an omni-directional marketing platform. A reflective cross-site scripting vulnerability exists in AliMom RAP. The vulnerability is due to the account parameter fails to correctly filter and escape the data submitted by the user, the attacker through the construction of XSS statement...

Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Business

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Business due to the program failing to...

There are multiple vulnerabilities in the digital teaching resource platform of Tesco

DSS Digital Teaching Resource Platform is a digital learning platform developed by DSS Information Technology Shenzhen Co., Ltd. which integrates online course production, online teaching, course management, teacher-student interaction and so on. There are arbitrary user registration, privilege...

SAP Customer Relationship Management (CRM) IPC Pricing Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in SAP Customer Relationship Management CRM IPC Pricing. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user's...

Multiple Vulnerabilities in Splunk Enterprise and Splunk Lite

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

Stored cross-site scripting vulnerability in the study function on the YxtCMF CourseController.class.php page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A stored cross-site scripting vulnerability exists in the study function on the YxtCMF CourseController.class.php page. An attacker can insert malicious js code into...

Multiple Reflective Cross-Site Scripting Vulnerabilities in Treehole Outbound Linking System

Treehole external chain system is a free and open source PHP external chain network disk system, support for seven cattle, local, remote three kinds of storage methods, support for multi-user system. TreeHole Outbound Linking System '\content\common\vplayer.php' and '\views\error.php' files have...

Stored Cross-Site Scripting Vulnerability in Tea Bugs App

The Tea Bug app is a and a mobile software specially created for those who love tea culture. Tea Bug app has a stored cross-site scripting vulnerability. Allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Stored cross-site scripting vulnerability in courseedit_post function on YxtCMF CenterController.class.php page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A stored cross-site scripting vulnerability exists in the courseeditpost function on the YxtCMF CenterController.class.php page. An attacker can insert malicious js...

DOM Cross-Site Scripting Vulnerability in UFIDA U8+ Financial System

UFIDA U8+ is a fine financial software. A stored cross-site scripting vulnerability exists in the UFIDA U8+ financial system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Stored Cross-Site Scripting Vulnerability in DocCMS x1.0

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. DocCMS x1.0 online message at the...

Multiple Cross-Site Scripting Vulnerabilities in Typo3 Formhandler

TYPO3 is a Swiss TYPO3 Association maintains a free and open source content management system framework CMS/CMF. formhandler is one of the Web development form Form module extension plug-in . Multiple cross-site scripting vulnerabilities exist in Typo3 Formhandler due to the program failing to...

HPE Project and Portfolio Management Center Cross-Site Scripting Vulnerability

HPE Project and Portfolio Management Center PPM is a suite of solutions from Hewlett Packard Enterprise HPE that provides project executives with the visibility and strategic operational needs to make decisions based on real-time visibility into the project lifecycle of the project portfolio. A...

Reflective XSS Cross-Site Scripting Vulnerability in TRS WCM Content Collaboration Platform

The TRS WCM Content Collaboration Platform TRS WCM is a content management system. The TRS WCM Content Collaboration Platform suffers from a reflected XSS cross-site scripting vulnerability. The UserName fails to effectively filter user-submitted data, allowing an attacker to construct XSS...

Reflected Cross-Site Scripting Vulnerability in ZYCHCMS V06 /Include/map.asp Page

ZYCHCMS is an enterprise website management system. A reflective cross-site scripting vulnerability exists in the ZYCHCMS V06 /Include/map.asp page. The vulnerability allows an attacker to construct an XSS statement and perform pop-up box operations to obtain sensitive information such as user...

PaulShop Stored Cross-Site Scripting Vulnerability

PaulShop is a shopping cart web system. PaulShop firstname, lastname, address, city, state, zipcode, phone, fax, deliveryaddress, deliverycity, deliverystate, deliveryzipcode Parameter-stored cross-site scripting vulnerability. An attacker can insert malicious js code into a page to obtain user...

Stored Cross-Site Scripting Vulnerability in aitecms Message Service

AIT aitecms to php + MySQL aitecms core for the development of customer information management system. A stored cross-site scripting vulnerability exists in the 'diy.php' message of aitecms. An attacker can insert malicious code into the page to obtain user cookies and other information, leading ...

Five Fingers CMS is vulnerable to XSS

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS has an XSS vulnerability. Attackers can use this vulnerability in the background of the message board , through the xs to obtain the super management of the cookie , to...

Trello: Unpatched (https://hackerone.com/reports/221928)- Unviladate File Upload to XSS on trello-attachment Bucket

Report no: https://hackerone.com/reports/221928 is unpatched. Poc: https://trello-attachments.s3.amazonaws.com/59663070a9025afc4b32c7c6/596641e05abfc29b1bd67ff8/9c5258c6acf27ffdf5e80d5bfabbb83b/lol.svg XSS Link...

Reflected Cross-site Scripting Vulnerability in Some Versions of the Landing Page of Green League Anti-Denial-of-Service System

Green Alliance Anti-DDoS System NSFOCUS Anti-DDoS System, or NSFOCUS ADS for short is an anti-DDoS product. The system is capable of timely discovering various types of attack traffic in the background traffic, quickly intercepting the attack traffic for the type of attack, and ensuring the passa...