Cross-site Scripting Vulnerability in ZhengTong Content Management System

The GovContent Management System is a website management system designed and built on the JAVA EE platform, which is mainly used for the website construction and management of government agencies, enterprises and institutions. A cross-site scripting vulnerability exists in the CMS. The...

IBM Social Rendering Templates for Digital Data Connector Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in IBM Social Rendering Templates for Digital Data Connector. Due to the program failing to filter user-supplied input. An attacker could exploit this issue to execute arbitrary script code in an unsuspecting user's browser within the context of the...

MyBB has multiple vulnerabilities (CNVD-2016-11606)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.7, including: SQL injecti...

MyBB has multiple vulnerabilities (CNVD-2016-11617)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.8 including: SQL injectio...

MyBB has multiple vulnerabilities (CNVD-2016-11616)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.8 including: SQL injectio...

MyBB has multiple vulnerabilities (CNVD-2016-11615)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.8 including: SQL injectio...

WordPress All In One WP Security And Firewall Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site.All In One WP Security & Firewall is one of the security management and firewall plug-ins. A cross-site scripting...

Raspberry Pi Zero Malicious USB Attack: PoisonTap

Raspberry Pi Zero Malicious USB Attack Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js. PoisonTap produces a cascading effect by exploiting the existing trust in variou...

Reflective Cross-Site Scripting Vulnerability in Knight Talent System 'key' Parameter

Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. A reflective cross-site scripting vulnerability exists in the search 'key' parameter of the Knight Talent System v4.0 job search function. The vulnerability allows attackers to...

TYPO3 TC Directmail Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 TC Directmail. The vulnerability allows an attacker to steal cookie-based authentication credentials due to the program failing to properly...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-11328)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

Unspecified Cross-Site Scripting Vulnerability in TYPO3 Store Locator Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified cross-site scripting vulnerability exists in TYPO3 Store Locator Extension. Because the program fails to adequately filter user-supplied data, an attacker could exploit the...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. Multiple cross-site scripting vulnerabilities...

IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability

IBM Kenexa LMS on Cloud is a full-featured, configurable, enterprise-grade, social Learning Management System LMS that integrates social networking, collaboration, and knowledge sharing capabilities. The software provides interactive elements that support users in evaluating learning content and...

Computer Associates Service Desk Manager Cross-Site Scripting Vulnerability (CNVD-2016-11327)

CA Service Desk Manager is a service desk manager that is a versatile and comprehensive service support solution. A cross-site scripting vulnerability exists in Computer Associates Service Desk Manager, which can be exploited by an attacker to execute arbitrary script code in a trusted user's...

Bigtree Cms Cross Site Scripting Vulnerability

BigTree CMS is an open source content management system. A cross-site scripting vulnerability exists in Bigtreecms Bigtree Cms versions prior to 4.1.16, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit the vulnerability to steal cookie-based...

IBM Kenexa LMS on Cloud suffers from an unspecified cross-site scripting vulnerability (CNVD-2016-11290)

IBM Kenexa LMS on Cloud is a full-featured, configurable, enterprise-grade, social Learning Management System LMS with integrated social networking, collaboration, and knowledge sharing capabilities. IBM Kenexa LMS on Cloud suffers from an unspecified cross-site scripting vulnerability that stems...

Unspecified Cross-Site Scripting Vulnerability in TYPO3 Secure Download Form Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified cross-site scripting vulnerability exists in TYPO3 Secure Download Form Extension. An attacker can exploit this vulnerability to execute arbitrary script code in an unsuspecting...

Unspecified Cross-Site Scripting Vulnerability in IBM Kenexa LMS on Cloud

IBM Kenexa LMS on Cloud is a full-featured, configurable, enterprise-grade, social Learning Management System LMS that integrates social networking, collaboration, and knowledge sharing capabilities. The software provides interactive elements that support users in evaluating learning content and...

MikroTik RouterOS Cross-Site Scripting Vulnerability

MikroTik RouterOS is a set of routing operating system developed based on Linux core by MikroTik Latvia. The system turns a PC computer into a professional router. A cross-site scripting vulnerability exists in MikroTik RouterOS version 6.36.2. Due to the program failing to adequately filter...