IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2017-12583)

IBM WebSphere Portal is a set of enterprise portal software developed by IBM. The software creates a platform that connects the internal and external parts of an organization, allowing employees, customers and suppliers to access internal data through the platform. A cross-site scripting...

ownCloud Error Page Cross-Site Scripting Vulnerability

ownCloud is the open source file synchronization and sharing solution. A cross-site scripting vulnerability exists in ownCloud, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions,...

ownCloud cross-site scripting vulnerability (CNVD-2017-16363)

ownCloud is the open source file synchronization and sharing solution. A cross-site scripting vulnerability exists in ownCloud, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions,...

SAP BusinessObjects Financial Consolidation Cross-Site Scripting Vulnerability (CNVD-2017-14353)

The SAP BusinessObjects portfolio offers a wide range of business intelligence software, information management software, enterprise performance management solutions, and regulatory, risk, and compliance solutions. financial Consolidation is an enterprise performance management product. A...

Catfish CMS is vulnerable to XSS

Catfish Catfish CMS is an open source PHP CMS web content management system. catfish cms there is an XSS vulnerability, the reason for this vulnerability is not filtered user-submitted data due to the attacker can exploit the vulnerability to implant cross-site code to obtain sensitive informatio...

XSS Vulnerability in Emlog Blog System

emlog 5.3.1 is a PHP and MySQL based blog and CMS builder. An XSS vulnerability exists in the Emlog blog system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

Cross-site scripting vulnerability in moodle course management system

Moodle Modular Object-Oriented Dynamic Learning Environment is a software package for creating online courses or websites. A cross-site scripting vulnerability exists in the Moodle course management system due to the program's lax filtering of link content. This allows an attacker to construct...

XSS Vulnerability in Unite Webmaster Classifieds Catalog

You can station long classification directory program source code using PHP + MYSQL development of the system, the site user support QQ login, the site system support pseudo-static, suitable for website inclusion, web site navigation, portal and so on. XSS vulnerability exists in YouNeng Webmaste...

Cross-Site Scripting Vulnerability in NexusPHPV1.5 (Current Version)

NexusPHPV1.5 is a system that is used by pt stations in China. NexusPHPV1.5 current version has a cross-site scripting vulnerability. Attackers can use this vulnerability to insert special cross-site code in the message, comment, private message and other pages, the user clicks on the cross-site...

Stored XSS Cross-Site Scripting Vulnerability in Coremail Mail System of Intex

Coremail mail system is a large-scale enterprise mail system independently developed by the company. There is a stored XSS cross-site scripting vulnerability in the surplus world Coremail mail system, due to the fact that coremail does not effectively filter the content of attachments, which It...

Storage-based Cross-site Scripting Vulnerability in Zibo Shining Network Technology Co. Ltd.'s Flash Website Building System

Flash CMS is a flash website system developed by Zibo Flash Network Technology Co. There is a stored cross-site scripting vulnerability in the flash CMS of Zibo Shining Network Technology Co. Attackers can use this vulnerability to insert malicious js code in the page, obtain user cookies and oth...

Liyang Jinlong Network Service Co., Ltd. website building system has XSS, ultra vires access vulnerabilities

Ltd. is a brand network company integrating creativity, planning, service and sales. There are XSS and transgression access vulnerabilities in the website building system of Liyang Golden Dragon Network Service Co. Attackers can use this vulnerability to insert XSS cross-site code in the message...

Stored Cross-Site Scripting Vulnerability in Seeding.com App

The Sowing the Seed App is a pregnancy preparation knowledge platform designed to answer the questions of moms who are preparing for pregnancy and getting pregnant. Sowseed.com App suffers from a stored cross-site scripting vulnerability due to the program's failure to filter user-submitted data...

XSS cross-site scripting vulnerability in the 'language' parameter of UFIDA U8+ system

UFIDA U8+ is to support enterprises to realize multi-end PC, cell phone, tablet and other devices multi-system windows, iOS, Android and other mainstream systems application deployment of business software. An XSS cross-site scripting vulnerability exists in the 'language' parameter of the UFIDA...

SAP Netweaver Authentication and SSO Cross-Site Scripting Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP Netweaver authentication and SSO due to the program not...

Multiple Cross-Site Scripting Vulnerabilities in Splunk Enterprise and Lite

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

Zurmo CRM Cross-Site Scripting Vulnerability (CNVD-2017-08089)

Zurmo CRM is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. Zurmo CRM suffers from a cross-site scripting attack vulnerability that stems from the program failing to adequately validate user input. An attacker could use this vulnerabili...

Pivotal RabbitMQ Cross-Site Scripting Vulnerability

Pivotal RabbitMQ, etc. are products of Pivotal Software, USA. A cross-site scripting vulnerability exists in Pivotal RabbitMQ due to the program failing to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary script code on the browser of a user on an...

Fortinet FortiOS HTML Injection Vulnerability (CNVD-2017-10593)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS...

SAP Enterprise Portal Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a set of enterprise portal based on NetWeaver system platform developed by SAP, which contains content management, single sign-on, knowledge management, collaborative work, full-text search and other modules. A cross-site scripting vulnerability exists in SAP Enterprise...