Wolf CMS Stored Cross-Site Scripting Vulnerability

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. The system provides user interface , templates , user management and rights management and other functions . A stored cross-site scripting vulnerability exists in Wolf CMS version 0.8, which stems fr...

Cross-site Scripting Vulnerability in EaseUS Content Management System

EECO Content Management System is a marketing enterprise website system developed based on SEO-friendliness. There is an XSS cross-site scripting vulnerability in EE Content Management System. The vulnerability file is comment.php, due to the safecheck function is not filtered completely, the...

Red Hat JBoss BPMS HTML Injection Vulnerability

Red Hat JBoss BPM Suite is a business process management platform from Red Hat, Inc. that brings together all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation and business process monitoring. An HTML injection vulnerability exists in Redhat...

ZOHO ManageEngine ServiceDesk Plus HTML Injection Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. An HTML injection vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which stems from the program's inability to adequately filte...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08858)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08857)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08856)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

CodoForum Cross-Site Scripting Vulnerability

Codoforum is a free PHP and MySQL based forum software. Stored cross-site scripting vulnerabilities exist in Codoforum version 3.4 at topic comment replies, which stem from the program failing to adequately filter user-submitted input. An attacker can exploit these vulnerabilities to steal...

Unspecified Cross-Site Scripting Vulnerability in SAP BusinessObjects BI Platform

SAP BusinessObjects BI Platform is the German SAP SAP company's set of business intelligence BI solution platform. An unspecified cross-site scripting vulnerability exists in SAP BusinessObjects BI Platform. Because the program does not adequately filter user-supplied input, an attacker could...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-08267)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-08269)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. IBM Connections allows...

TYPO3 CMS Cross-Site Scripting Vulnerability (CNVD-2016-08351)

TYPO3 CMS is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. TYPO3 CMS suffers from a cross-site scripting vulnerability due to failure to properly filter user-supplied input. An attacker could be allowed to exploit the vulnerability t...

Drupal Core Cross-Site Scripting Vulnerability (CNVD-2016-08263)

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Core that allows an attacker to steal cookie-based authentication credentials, obtain sensitive information, and execute arbitrary script code in the context of the...

WordPress Plugin W3 Total Cache 'admin.php' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. w3 Total Cache is one of the blog optimization plug-ins. A cross-site scripting vulnerability exists in the WordPress plugin W3 Total Cache 'admin.php' 0.9.4.1 and earlier. An attacker can...

Multiple Vulnerabilities in BINOM3 Electric Power Quality Meter

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. Cross-site scripting vulnerabilities, HTML injection vulnerabilities, security bypass vulnerabilities, and information disclosure vulnerabilities exist in BINOM3 Electric...

TeemIp 2.0.2 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TEEMIP-XSS-COOKIE-THEFT.txt + ISR: ApparitionSec Vendor: =============== www.combodo.com Product: ============== TeemIp v2.0.2 Offer your customers a professional and economically viable...

Kerio Control Information Disclosure Vulnerability

Kerio Control is a simple and fast unified threat management system. Information disclosure vulnerabilities in Kerio Control version 9.1.3 can be exploited by attackers to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitive...

Kerio Control Memory Corruption Vulnerability

Kerio Control is a simple and fast unified threat management system. Memory corruption vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitive...

Kerio Control Cross-Site Scripting Vulnerability

Kerio Control is a simple and fast unified threat management system. Cross-site scripting attack vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitiv...

Kerio Control Cross-Site Request Forgery Vulnerability

Kerio Control is a simple and fast unified threat management system. Cross-site request forgery vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitive...