Multiple vulnerabilities in the HadSky Light Forum system

HadSky Light Forum System is a free and open forum system for individual users. 1 There is a cross-site request forgery vulnerability in the HadSky Light Forum system. Because only the user operation only identity check and permission check, did not check the source of the operation, allowing...

WordPress AnyVar Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language.REST API can transfer data via JSON format to access or control the content of the WordPress site. A cross-site scripting vulnerability exists in the WordPress AnyVar plugin. An attacker can use the vulnerability to execute arbitra...

TYPO3 cross-site scripting vulnerability (CNVD-2017-02621)

Typo3 is one of the leading brands of open source content management systems CMS and content management frameworks CMF based on PHP and MySQL databases and is a powerful open source solution. TYPO3 suffers from a cross-site scripting vulnerability due to the program failing to properly validate...

OEcms enterprise website system system url parameter exists stored cross-site scripting vulnerability

OEcms enterprise website system system is developed by OEcms technology OEdev based on the development of OEPHP architecture system to develop a set of enterprise building system. OEcms enterprise website system system there are stored cross-site scripting vulnerabilities. Due to poor filtering o...

WordPress rockhoist-badges plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language.REST API can transfer data via JSON format to access or control the content of the WordPress site. A cross-site scripting vulnerability exists in the WordPress rockhoist-badges plugin due to a failure to adequately validate user...

FlightAirMap Multiple Cross-Site Scripting Vulnerabilities

FlightAirMap is an open source project that displays flights in real time on a 2D or 3D map. FlightAirMap suffers from multiple cross-site scripting vulnerabilities. The vulnerabilities arise due to a failure to properly validate user-submitted data. An attacker could use the vulnerabilities to...

Multiple vulnerabilities in Accellion FTP server

Accellion FTP server is a file transfer server from Accellion, USA. An information disclosure and cross-site scripting vulnerability exists in Accellion FTP server, which can be exploited by an attacker to execute arbitrary script code in the context of a browser to steal cookie-based...

Multiple Reflective Cross-Site Scripting Vulnerabilities in Xinhao Collaboration Office System

Xinhuo coworking system is an open source office system, cross-platform system, support APP, pc web version, pc client and so on. There are multiple reflective cross-site scripting vulnerabilities in Xinhao Collaboration Office System. Because the gettotal parameter is not filtered, resulting in...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-02343)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

Palo Alto Networks PAN-OS HTML Injection Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from an HTML injection vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to execu...

Drupal Facebook Pull Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Facebook Pull is one of the modules. A cross-site scripting vulnerability exists in the Drupal Facebook Pull module. This vulnerability can be exploited to execute arbitrary script code...

Drupal Hotjar Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Hotjar module, which stems from the program failing to properly validate user-supplied input. When an unknowing...

Trend Micro InterScan Web Security Virtual Appliance Cross-Site Scripting Vulnerability

Trend Micro InterScan Web Security Virtual Appliance IWSVA is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro IWSVA version 6.5. The vulnerability can be...

Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2017-01995)

Cisco Firepower Management Center is a new generation of firewall management center software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, as the program fails to adequately validate user input. An attacker could exploit this...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02007)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

ViewVC Cross-Site Scripting Vulnerability

Viewvc is a web-based CVS, SVN code repository browsing tool . A cross-site scripting vulnerability exists in ViewVC because the program does not properly validate user-supplied input. An attacker can exploit the vulnerability to execute arbitrary script code in a user's browser to steal...

Multiple Cross-Site Scripting Vulnerabilities in PhreeBooksERP

PhreeBooksERP is an open source ERP system for accounting use. PhreeBooksERP suffers from multiple cross-site scripting vulnerabilities due to failure to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary script code on a user's browser on an affecte...

Drupal Search API Sorts Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.The Search API Sorts module is one of the modules that provides custom sorting and global sort blocks for the Search API. A cross-site scripting vulnerability exists in the Drupal Searc...

Cisco Secure Access Control System Cross-Site Scripting Vulnerability (CNVD-2017-02017)

Cisco Secure Access Control System ACS, is the core component of the TrustSec solution of the U.S. Cisco Cisco company, is able to provide RADIUS and TACACS + services of the policy management platform, is the realization of the enterprise network access policy and identity management platform. A...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02004)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting attack vulnerability...