IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12641)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting attack vulnerability exists in IBM Jazz Reporting Service that stems from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary scripts in an...

Chaudic Cross-Site Scripting Vulnerability

Chaudic is a professional retail management software. A cross-site scripting vulnerability exists in the q parameter of the search page in Chaordic version 1.1, which stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to steal...

NETGEAR R7000 - Cross-Site Scripting

NETGEAR R7000 - Cross-Site Scripting Exploit Title: Netgear R7000 - XSS via. DHCP hostname Date: 11-12-2016 Exploit Author: Vincent Yiu Contact: https://twitter.com/vysecurity Vendor Homepage: https://www.netgear.com/ Category: Hardware / WebApp Version: V1.0.7.21.1.93 + LATEST to date...

Netgear R7000 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netgear R7000 - XSS via. DHCP hostname Date: 11-12-2016 Exploit Author: Vincent Yiu Contact: https://twitter.com/vysecurity Vendor Homepage: https://www.netgear.com/ Category: Hardware / WebApp Version: V1.0.7.21.1.93 +...

XSS Cross-Site Scripting Vulnerability in Apabi Thesis Authorization Submission System of Beijing Founder Apabi Technology Co.

Apabi Thesis Authorization Submission System is a thesis submission system that can be used by college libraries to collect students' theses developed by Beijing Founder Apabi Technology Co. A cross-site scripting vulnerability exists in the Apabi Thesis Authorization Submission System of Beijing...

AbanteCart Cross-Site Scripting Vulnerability

AbanteCart is a free PHP-based e-commerce solution. A cross-site scripting vulnerability exists in the address1 parameter of the New Order page in AbanteCart version 1.2.7, which stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to...

WordPress Image Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blog platform , the platform supports PHP and MySQL server set up a personal blog site . Image Gallery is one of the image processing plug-ins . WordPress Image Gallery version 1.9.65 there is an HTML...

WordPress Plugin Insert Html Snippet Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A cross-site request forgery vulnerability exists in Wordpress plugin Insert Html Snippet version 1.2. The...

Burden TMA Cross-Site Scripting Vulnerability

Burden TMA is a full-featured PHP-based task management application that supports adding, editing, and deleting tasks, and distinguishes task importance levels by color. A cross-site scripting vulnerability exists in Burden TMA version 2.1.1, which stems from the program failing to adequately...

Zurb Foundation tooltip plugin 'foundation.tooltip.js' cross-site scripting vulnerability

ZURB Foundation is an advanced front-end responsive framework. A cross-site scripting vulnerability exists in the 'tooltip' plugin for Zurb Foundation that stems from a failure to adequately validate user input. The vulnerability can be exploited to execute arbitrary script code on a user's brows...

VMPanel Cross-Site Scripting Vulnerability

VMPanel is a website based on the VMware Esx/Esxi control panel and WHMCS plug-in. A cross-site scripting vulnerability exists in the username parameter of the VMPanel login page. As the program fails to adequately filter user-submitted input. An attacker could exploit this vulnerability to steal...

IBM iNotes and Domino Cross-Site Scripting Vulnerability (CNVD-2016-11820)

IBM iNotes and Domino are both products of IBM Corporation in the U.S. iNotes is a suite of Web-based e-mail software; Domino is a platform for hosting social business applications. A cross-site scripting vulnerability exists in IBM iNotes and Domino that stems from the program failing to properl...

IBM iNotes and Domino Cross-Site Scripting Vulnerability (CNVD-2016-11850)

IBM iNotes and Domino are both products of IBM Corporation in the U.S. iNotes is a suite of Web-based e-mail software; Domino is a platform for hosting social business applications. A cross-site scripting vulnerability exists in IBM iNotes and Domino that stems from the program failing to properl...

IBM iNotes and Domino Cross-Site Scripting Vulnerability

IBM iNotes and Domino are both products of IBM Corporation in the U.S. iNotes is a suite of Web-based e-mail software; Domino is a platform for hosting social business applications. A cross-site scripting vulnerability exists in IBM iNotes and Domino that stems from the program failing to properl...

IBM iNotes and Domino Cross-Site Scripting Vulnerability (CNVD-2016-11818)

IBM iNotes and Domino are both products of IBM Corporation in the U.S. iNotes is a suite of Web-based e-mail software; Domino is a platform for hosting social business applications. A cross-site scripting vulnerability exists in IBM iNotes and Domino that stems from the program failing to properl...

TomatoCart 'step_5.php' Cross-Site Scripting Vulnerability

TomatoCart is a set of open source e-commerce software developed using PHP. A cross-site scripting vulnerability exists in TomatoCart 'step5.php'. An attacker can exploit the vulnerability to execute arbitrary script code in an unsuspecting user's browser within the context of the affected site...

BigTree CMS 'redraw-field.php' Cross-Site Scripting Vulnerability

BigTree CMS is an open source content management system. A cross-site scripting vulnerability exists in BigTree CMS 'redraw-field.php'. An attacker could exploit the vulnerability to execute arbitrary script code in a user's browser while browsing the affected site to steal cookie-based...

MoinMoin 'action/fckdialog.py' cross-site scripting vulnerability

MoinMoin is a set of open source , scalable wiki engine program based on the Python environment . A cross-site scripting vulnerability exists in MoinMoin 'action/fckdialog.py'. As the program fails to adequately filter user-supplied input data. An attacker can exploit the vulnerability to execute...

XSS Cross-Site Scripting Vulnerability and CSRF Vulnerability in OpenPortal Network Access System

OpenPortal network access authentication system supports standard Portal protocol, Portal V1 V2 protocol, CMCC protocol, WISPr protocol and PAP CHAP authentication, widely used in smart communities, smart cities, smart hospitals, plazas, large-scale supermarkets, hotels, tourist attractions,...

Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability

Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...