Drupal Opening Hours Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. opening hours is one of the modules used to find stores or libraries that are open at a certain time. A cross-site scripting vulnerability exists in the Drupal Opening Hours module in...

TYPO3 CCDebug Extension Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.CCDebug is one of the extensions that provides developers with enhanced php debugging functionality. A cross-site scripting vulnerability exists in versions of the TYPO3...

Drupal Outline Designer Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Outline Designer is one of the user experience modules for library management. A cross-site scripting vulnerability exists in Drupal Outline Designer versions 7.x-2.x prior to 7.x-2.3,...

Wolf CMS Cross-Site Scripting Vulnerability (CNVD-2016-05085)

Wolf CMS is a PHP-based open source content management system CMS developed by the Wolf CMS team. A cross-site scripting vulnerability exists in Wolf CMS version 0.8.3.1, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication and launch other attac...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-05136)

Open-Xchange AppSuite OX AppSuite is a set of Web-based cloud desktop environments from the U.S. company Open-Xchange. A cross-site scripting vulnerability exists in OX AppSuite that can be exploited by an attacker to execute arbitrary script code, steal cookie-based authentication and launch oth...

Multiple Vulnerabilities in ZOHO ManageEngine OpManager

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. The software provides monitoring configuration, alarms and notifications, monitoring reports and other functions. HTML injection vulnerabilities, cross-site scripting vulnerabilities,...

WordPress All in One SEO Pack Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform developed in PHP language by WordPress Software Foundation.All in One SEO Pack is one of the SEO optimized plugins. An HTML injection vulnerability exists in the WordPress All in One SEO Pack plugin version 2.3.6.1, which can be exploited by an attacker to...

WordPress Live Chat Support Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. An HTML injection vulnerability exists in versions of the WordPress Live Chat Support plugin prior to 6.2.02, which can be exploited by an attacker to run arbitrary...

New Relic: XSS in a newrelic.com site

Hello, I found a XSS vulnerability that could be used by an attacker to execute javascript in the client, for example, an attacker could steal the cookie of the user or an attacker could redirect the client to an attacker site and try to exploit vulnerabilities against the browser. Here you can...

Multiple Vulnerabilities in Joomla! JSN PowerAdmin Extensio

Joomla is the United States Open Source Matters team developed a set of open source content management system CMS. j Cross-site scripting vulnerability and cross-site request forgery vulnerability exists in Joomla! JSN PowerAdmin Extensio version 2.3.0, which can be exploited by an attacker to...

Pivotal Software Ops Manager HTML Injection Vulnerability

Pivotal Software PCF Ops Manager is a set of consoles for installing, upgrading and changing PCFs from Pivotal Software, USA. An HTML injection vulnerability exists in Pivotal Software Ops Manager version 1.6.x prior to 1.6.17. An attacker can exploit this vulnerability to execute arbitrary scrip...

Pivotal Cloud Foundry Elastic Runtime HTML Injection Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. An HTML injection...

Apache Archiva HTML Injection Vulnerability

Apache Archiva is a suite of software from the Apache Software Foundation in the United States for managing one or more remote stores. An HTML injection vulnerability in Apache Archiva version 1.3.9 can be exploited by an attacker to execute arbitrary code in an affected application, steal...

CloudBees Jenkins has multiple vulnerabilities

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . HTML...

IBM Forms Server Cross-Site Scripting Vulnerability

IBM Forms Server is the United States IBM's set of scalable document-based form application of electronic form automation software. A cross-site scripting vulnerability exists in IBM Forms Server that stems from the program's failure to adequately filter user-submitted input. An attacker could...

Imperial Download System V2.5 Link Injection and Stored Cross-site Vulnerabilities

Empire Download System" is a code completely open source, dedicated to the website information download and online video site to provide solutions. The system V2.5 a module in the background there are link injection and cross-site vulnerabilities, the attacker inserted malicious code in the page ...

OpenDocMan has multiple vulnerabilities

OpenDocMan is OpenDocMan project team developed an open source Web-based PHP document management system DMS. HTML injection and cross-site scripting vulnerabilities exist in OpenDocMan, which can be exploited by attackers to execute arbitrary script code, steal cookie-based authentication or...

ATutor has multiple vulnerabilities

ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. An HTML injection and cross-site scripting vulnerability exists in ATutor, which can be exploited by an attacker to execute arbitrary script code, steal cookie-based authentication or control...

WordPress Password Change Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A password change vulnerability exists in WordPress 4.5.2 and earlier versions. An attacker can exploit this...

wordpress -- multiple vulnerabilities

Adam Silverstein reports: WordPress 4.5.3 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.5.2 and earlier are affected by several security issues: redirect bypass in the customizer, reporte...