Moodle HTML Injection Vulnerability (CNVD-2017-04490)

Moodle is a free, open-source e-learning software platform developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an HTML injection vulnerability. As the program fails to adequately validate user input. An attacker could utilize specially crafted HTML and arbitrary scripting code to...

Moodle HTML Code Injection Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an HTML code injection vulnerability that stems from a failure to...

Red Hat JBoss BPMS Cross-Site Scripting Vulnerability

Red Hat JBoss BPM Suite is a business process management platform from Red Hat, Inc. that brings together all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation and business process monitoring. A cross-site scripting vulnerability exists in R...

MetInfo HTML Injection Vulnerability

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate Web site construction of the cms station-building system. MetInfo has an HTML injection vulnerability that stems from failure t...

Cisco Unified Computing System Director Cross-Site Scripting Vulnerability

Cisco UCS Director formerly known as Cisco Cloupia is a set of converged infrastructure management solutions from the U.S. company Cisco Cisco. The solution enables users to manage computing power, network services, storage, and virtual machines from a single management console to more quickly an...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CNVD-2017-03681)

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single web portal. The solution supports automated ordering of computing, networking, storage, and other data center resources in a unified service catalog. web framework is one of the...

Lutim Cross-Site Scripting Vulnerability

Lutim means Let's Upload That Image and can be used to store images. Lutim suffers from a cross-site scripting vulnerability due to the program failing to adequately validate user-supplied input. When an unsuspecting user browses the affected site, an attacker could exploit this vulnerability to...

SAP Enterprise Portal 'styleservice' Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a German SAP SAP company's application integration platform, which integrates enterprise business information, enterprise applications and services, etc. together, and in the form of an independent Web-based user interface to the operator. A cross-site scripting...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03606)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03859)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

Juniper Networks IDP Appliance Configuration Manager Cross-Site Scripting Vulnerability

Juniper Networks IDP is a suite of intrusion detection defense solutions. A cross-site scripting vulnerability exists in Juniper Networks IDP Appliance Configuration Manager due to a failure to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary scrip...

Multiple cross-site scripting vulnerabilities in Symantec Web Gateway (CNVD-2017-03683)

Symantec Web Gateway is a spam filter that combines anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec USA. Multiple cross-site scripting vulnerabilities exist in Symantec Web Gateway that stem from a failure to adequately validate user input...

Stored Cross-Site Scripting Vulnerability in DuoDuoRebate.com System Tag Parameters

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate website system V8.3UTF8 official version February 10, 2017 there are stored cross-site scripting vulnerabilities. Due to the tag parameter failed to filter ...

Roundcube cross-site scripting vulnerability (CNVD-2017-03892)

RoundCube Webmail is a browser-based IMAP client mail client that supports address book management, message searching, spell checking and more. Roundcube suffers from a cross-site scripting vulnerability. The vulnerability stems from a program that fails to adequately validate user input, and can...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03618)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03615)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-03619)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

wuhu cross-site scripting vulnerability

Wuhu is a lightweight third-party management system PMS for Gargaj, which is used to help organizational parties with tasks such as collecting entries, managing polls, and communicating information via a large screen. wuhu suffers from a cross-site scripting vulnerability that stems from the...

Multiple Unspecified Cross-Site Scripting Vulnerabilities in TYPO3 CMS

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. TYPO3 CMS suffers from multiple unspecified cross-site scripting vulnerabilities that stem from the program failing to properly validate user-supplied input. This vulnerability can be exploited to...

Soruly whatanime.ga Cross-Site Scripting Vulnerability

Soruly whatanime.ga is a program developed by soruly to search for animated scenes by image. Soruly whatanime.ga suffers from a cross-site scripting vulnerability that stems from the program failing to properly validate user-supplied input. When an unsuspecting user browses the affected site, an...