Multiple Cross-Site Scripting Vulnerabilities in Drupal Image Title Module

Drupal is a developmental CMF Content Management Framework written in the PHP language. Multiple cross-site scripting vulnerabilities exist in the Drupal Image Title module. Because the application fails to properly filter user-supplied input, an attacker could exploit the vulnerabilities to...

Drupal Profile2 Privacy Module Cross-Site Scripting Vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Profile2 Privacy module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrar...

Cross-site scripting vulnerability in Drupal Webform module

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Webform module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrary script...

WordPress Plugin Google Analytics by Yoast 'class-admin.php' HTML Injection Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. An HTML injection vulnerability exists in the WordPress plugin Google Analytics by Yoast 'class-admin.php'. An attacker can exploit the vulnerability to execute...

PhreeBooks Input Validation Vulnerability

PhreeBooks is a suite of open source Web-based enterprise resource planning ERP and accounting applications that provide vendor account information management, inventory management and tracking, checking and bank reconciliation, and more. An input validation vulnerability exists in PhreeBooks. An...

IBM Rational Focal Point Cross-Site Scripting Vulnerability (CNVD-2015-01906)

IBM Rational Focal Point is a Web-based product management system for IBM Rational with a built-in customer- and market-oriented product management process that provides workflow automation, information relevance analysis, statistical analysis of information, and prioritization analysis of...

IBM Rational Focal Point HTML Injection Vulnerability (CNVD-2015-01907)

IBM Rational Focal Point is a Web-based product management system for IBM Rational with a built-in customer- and market-oriented product management process that provides workflow automation, information relevance analysis, statistical analysis of information, and prioritization analysis of...

724CMS Has Multiple Cross-Site Scripting Vulnerabilities

724CMS is a content management system. Multiple cross-site scripting vulnerabilities exist in 724CMS due to the program failing to properly filter user-submitted input. A remote attacker can exploit the vulnerabilities to construct malicious URIs and trick users into parsing them, which can be us...

WordPress Daily Edition Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme fiche-disque.php...

USN-2531-1 requests vulnerability

Matthew Daley discovered that Requests incorrectly handled cookies without host values when being redirected. A remote attacker could possibly use this issue to perform session fixation or cookie stealing attacks...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01712)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...

Microsoft Exchange Server Canary Parameter Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of user-submitted parameters, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01711)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2015-01717)

IBM Rational Team Concert is a collaboration and development solution. An input validation vulnerability exists in IBM Rational Team Concert. The vulnerability is allowed to be exploited by remote attackers to construct malicious URIs that can be induced to be resolved by the user, which can be...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2015-01709)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. An input validation vulnerability exists in IBM Rational Quality Manager. The vulnerability allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain...

Microsoft Exchange Server Error Message Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. A cross-site scripting vulnerability exists in Microsoft Exchange Server's handling of error messages, which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user,...

IBM WebSphere Cross-Site Scripting Vulnerability (CNVD-2015-01723)

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which can be exploited by a remote attacker to construct maliciou...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2015-01716)

IBM Rational Team Concert is a collaboration and development solution. An input validation vulnerability exists in IBM Rational Team Concert. A remote attacker can exploit the vulnerability to construct a malicious URI and trick a user into parsing it, which could result in obtaining a sensitive...

Microsoft Exchange Server Audit Reports Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. Microsoft Exchange Server audit reports a cross-site scripting vulnerability in the processing of user-submitted parameters, which can be exploited by remote attackers to construct malicious URIs that can be tricked into being...

IBM WebSphere Cross-Site Scripting Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which can be exploited by a remote attacker to construct maliciou...