b2evolution HTML injection vulnerability (CNVD-2016-07942)

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. An HTML injection vulnerability exists in b2evolution 6.7.5 and earlier versions, which stems from the program's failure to adequately filter user-submitted input. When a user browses the...

b2evolution HTML Injection Vulnerability

b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. An HTML injection vulnerability exists in b2evolution 6.7.5 and earlier versions, which stems from the program's failure to adequately filter user-submitted input. When a user browses the...

Kajona cross-site scripting vulnerability (CNVD-2016-08093)

Kajona is an open source CMS written in PHP. A cross-site scripting attack vulnerability exists in Kajona version 4.7. An attacker can use this vulnerability to obtain cookies, inject keyloggers or bypass CSRF protection...

Unspecified Cross-Site Scripting Vulnerability in Polycom HDX Video End Points

Polycom HDX Video End Points video conferencing system. An unspecified cross-site scripting vulnerability exists in Polycom HDX Video End Points. The vulnerability can be exploited to execute arbitrary HTML and script code in the browsers of trusted users in the context of an affected site, steal...

OpenStack manila HTML Injection Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA and Rackspace, Inc. in the United States. An HTML injection vulnerability exists in OpenStack manila. As the program fails to adequately filter user-submitted input. When a user...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2016-07642)

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.4.2 and prior versions, which stems from the program's failure to adequately filter user-submitted input. When a user...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2016-07643)

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.4.2 and prior versions, which stems from the program's failure to adequately filter user-submitted input. When a user...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-07644)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite that stems from the...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2016-07641)

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.4.2 and prior versions, which stems from the program not adequately filtering user-submitted input. When a user brows...

Stored Cross-Site Scripting Vulnerability in Knight CMS Version 3.7

Knight CMS Talent System is a professional talent system based on PHP+MYSQL. A stored cross-site scripting vulnerability exists in Knight CMS version 3.7. Because the editor in KindEditor version 4.1.10 fails to filter input content, an attacker can exploit the vulnerability to execute arbitrary...

Drupal Flag Lists Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Flag Lists is one of the modules that allows users to create tagged lists. A cross-site scripting vulnerability exists in the Drupal Flag Lists module. The program fails to adequately...

WordPress Cross-Site Scripting Vulnerability (CNVD-2016-07454)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress suffers from a directory traversal vulnerability. Because the program fails to adequately filter...

Multiple Vulnerabilities in Trend Micro InterScan Messaging Security

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. Trend Micro InterScan Messaging Security has multiple vulnerabilities. The vulnerabilities can be exploited by an attacker to execute arbitrary script code on a trusted user's browser in the context of an affected...

ADOdb Cross-Site Scripting Vulnerability

ADODB is a compatible database application program interface API, a variety of databases can be. A cross-site scripting vulnerability exists in ADOdb. Because the program fails to properly filter user-supplied input, an attacker could exploit the vulnerability to execute arbitrary script code in...

Multiple HTML Injection Vulnerabilities in Red Hat JBoss BPMS

Red Hat JBoss BPMS is a business process management platform from Red Hat that combines all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation, and business process monitoring. Red Hat JBoss BPMS has multiple HTML injection vulnerabilities th...

RESTEasy Cross-Site Scripting Vulnerability

RESTEasy is an open source architecture for building web framework applications. RESTEasy suffers from a cross-site scripting vulnerability due to a failure to properly filter user-supplied input. An attacker could be allowed to exploit the vulnerability to steal cookie-based authentication...

Trend Micro InterScan Messaging Security Cross-Site Scripting Vulnerability

Trend Micro InterScan Messaging Security is a hybrid SaaS email security solution. A cross-site scripting vulnerability exists in Trend Micro InterScan Messaging Security. An attacker could exploit the vulnerability to execute arbitrary script code on a trusted user's browser in the context of an...

HP Operations Manager Cross-Site Scripting Vulnerability

HP Operations Manager OM is a set of business-oriented enterprise-class system management software from Hewlett-Packard HP. The software provides system management, application management, event processing, business presentation and other functions. A cross-site scripting vulnerability exists in ...

SQL Injection and XSS Vulnerabilities in Centro InfoTech Web Management System Wim V1.03

Ltd. is Huaibei Shengtuo Information Technology Co., Ltd. is Huaibei website construction, website optimization, 400 telephone for, short message group sending, software development, Internet industry companies. SQL injection and XSS vulnerability exists in version 1.03 of Centro InfoTech's websi...

Tencent QQ Android APP suffers from XSS cross-site scripting vulnerability

Tencent QQ is an Internet-based instant messaging IM software. An XSS cross-site scripting vulnerability exists in the "Tencent News" input box in the Android version of the product, which can be exploited by an attacker to perform a cross-site scripting attack to obtain sensitive information suc...