b2evolution cross-site scripting vulnerability (CNVD-2017-01089)

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution due to a failure of the program to properly validate user input. An attacker could use this vulnerability to execute arbitrary script...

Symphony cross-site scripting vulnerability (CNVD-2017-01078)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extension and so on. A cross-site scripting attack vulnerability exists in Symphony CMS, which stems from a failure to properly validate user input. An attacker could...

Moodle HTML Injection Vulnerability (CNVD-2017-00905)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an HTML injection vulnerability due to the program failing to...

HTML Injection Vulnerability in Multiple EMC Products

EMC Documentum WebTop is a suite of products that allow users to access Documentum repositories and content management services in a standard browser application.Documentum Administrator is a set of Web-based development tools for performing Documentum system administration tasks. Documentum...

Drupal Autocomplete Deluxe Module Cross-Site Scripting Vulnerability

Drupal is the Drupal community maintained by a set of free , open source content management system developed in PHP language . Autocomplete Deluxe is one of the modules based on the JQuery UI autocomplete for the classification field to create a new widget . A cross-site scripting vulnerability...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Doubleclick for Publishers Module

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Multiple cross-site scripting vulnerabilities exist in the Drupal Doubleclick for Publishers module. The vulnerabilities can be exploited to execute arbitrary script code ...

Atlassian Confluence HTML Injection Vulnerability

Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. An HTML injection vulnerability exists in Atlassian Confluence. An attacker can exploit the vulnerability to execute arbitrary script code in the brows...

DoraCMS Cross-Site Scripting Vulnerability

DoraCMS is based on Nodejs + express + mongodb written a content management system . A cross-site scripting vulnerability exists in the id parameter of the getNodes.php page of DoraCMS, which can be exploited by an attacker to steal cookie-based authentication or inject malicious scripts...

Acontent CMS Cross-Site Scripting Vulnerability

AContent is an eLearning content creation tool and library that supports importing, exporting, and producing IMS content packages. A cross-site scripting vulnerability exists in the newversion parameter of the install.php page in version 1.3 of Acontent, which can be exploited by an attacker to...

html5lib cross-site scripting vulnerability

html5lib is a Python library for parsing HTML. A cross-site scripting vulnerability exists in html5lib, which stems from the program's failure to adequately filter user-submitted input. The vulnerability can be exploited to execute arbitrary script code in a user's browser to steal cookie-based...

html5lib cross-site scripting vulnerability (CNVD-2017-00053)

html5lib is a Python library for parsing HTML. A cross-site scripting vulnerability exists in html5lib, which stems from the program's failure to adequately filter user-submitted input. The vulnerability can be exploited to execute arbitrary script code in a user's browser to steal cookie-based...

u5cmszip_en Cms Cross Site Scripting Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. A cross-site scripting vulnerability exists in the...

EasyNetSites 'name.php' Page Cross-Site Scripting Vulnerability

EasyNetSites is a WEB-based tool for managing organizational relationships on websites. A cross-site scripting vulnerability exists in the as parameter of the name.php page of EasyNetSites, which can be exploited by an attacker to steal cookie-based authentication or inject malicious script...

Horos Cross-Site Scripting Vulnerability

Horos is an open source free DICOM medical image viewer. A cross-site scripting vulnerability exists in Horos version 2.1.0, which can be exploited by attackers to steal cookie-based authentication or inject malicious scripts...

eramba Enterprise/Community Cross-Site Scripting Vulnerability

eramba is a leading, open source application for enterprise-class IT governance, risk and compliance. A cross-site scripting vulnerability exists in the Enterprise and Community editions of Eramba, which can be exploited by an attacker to steal cookie-based authentication or inject malicious...

SAP HANA Cockpit Cross-Site Scripting Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. A cross-site scripting vulnerability exists in SAP HANA. As the program fails to properly filter...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2016-12657)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker could exploit the vulnerability to steal cookie-based authentication, execute arbitrary code, and...

Mozilla Firefox add-ons SDK cross-site scripting vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in versions of Mozilla Firefox prior to 50.1. An attacker can exploit the vulnerability to steal cookie-based authentication...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12640)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting security vulnerability exists in IBM Jazz Reporting Service that originates from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary script on a...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12641)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting attack vulnerability exists in IBM Jazz Reporting Service that stems from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary scripts in an...