Drupal Ubercart Discount Coupons Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Ubercart Discount Coupons is one of the modules used to set up coupons for the Ubercart store. A cross-site scripting vulnerability exists in the Drupal Ubercart Discount Coupons module...

Comsenz SupeSite CMS 'cp.php' Cross-Site Scripting Vulnerability

Comsenz SupeSite CMS is a content management system CMS of China Comsenz Comsenz. A cross-site scripting vulnerability exists in Comsenz SupeSite CMS, which arises from the program's failure to adequately filter user-submitted input. When a user browses the affected site, their browser will execu...

Drupal Trick Question module cross-site scripting vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Trick Question is one of the CAPTCHA type spam defense modules. A cross-site scripting vulnerability exists in the Drupal Trick Question module. The vulnerability is due to the program...

Drupal Simple Subscription Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Simple Subscription is one of the subscription modules. A cross-site scripting vulnerability exists in the Drupal Simple Subscription module in versions 6.x-1.1 prior to 6.x-1.x and...

BEdita CMS has multiple vulnerabilities

BEdita CMS is a web development framework that provides a full-featured content management system CMS. A cross-site scripting vulnerability and a cross-site request forgery vulnerability exist in BEdita CMS. When a user browses the affected website, his/her browser will execute arbitrary script...

Ultimate PHP Board (UPB) Cross-Site Scripting Vulnerability

Ultimate PHP Board is a forum program. A cross-site scripting vulnerability exists in Ultimate PHP Board, which can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Webshop hun Cross-Site Scripting Vulnerability

Webshop hun is a WEB-based application. Webshop hun suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

PHP address book has multiple SQL injection and multiple cross-site scripting vulnerabilities

PHP Address Book Address Book is a PHP development of a simple Web-based address book , contact management applications , support groups , addresses , e-mail , telephone numbers and birthday information ; can be exported to vCard and CSV , integrated with Gmail, Google and Yahoo maps , the databa...

Cross-site scripting vulnerability in tcllib'::html::textarea' function

tcllib is a collection of packages for the Tcl programming language, distributed as both source code and precompiled binaries, and supporting a wide range of common operating systems: Windows, BSD, Unix, and Linux. A cross-site scripting vulnerability exists in the tcllib '::html::textarea'...

嘉缘人才系统存储型xss

简要描述： rt 详细说明： 首先注册一个用户，然后新建一份简历。在简历的添加教育背景处插入xss payload 然后保存这份简历。 可以看到插入的数据 数据没有编码直接进入数据库了。 然后查看简历直接触发 在后台简历管理，也可触发。偷取管理员cookie。 漏洞证明： img src="https://images.seebug.org/upload/201502/22235042cdc7d743d84b93343ef1a5d9f476c06a.jpg" alt="4...

Drupal SMS Framework Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.SMS Framework is one of the modules that enables the SMS protocol. A cross-site scripting vulnerability exists in the Drupal SMS Framework module due to the program's failure to...

Wordpress Media Cleaner plugin 'wp-media-cleaner.php' has multiple cross-site scripting vulnerabilities

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation, which supports setting up personal blog sites on servers with PHP and MySQL.Media Cleaner is one of the plugins that helps to clean the uploaded directories and media libraries. Wordpres...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Ubercart Webform Integration Module

Drupal is the Drupal community maintained by a set of free , open source content management system developed in PHP language . Ubercart Webform Integration is one of the integrated Web forms and Ubercart module . A cross-site scripting vulnerability exists in the Drupal Ubercart Webform Integrati...

Drupal inLinks Integration Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. inLinks Integration is one of the modules that sells goods through backlinks. A cross-site scripting vulnerability exists in the Drupal inLinks Integration module due to the program's...

Drupal Entity API Module Field Label Cross-Site Scripting Vulnerability

Drupal is an open source content management platform. A cross-site scripting vulnerability exists in the Drupal Entity API module field labels due to the program failing to properly filter user-supplied input. An attacker could be allowed to exploit this vulnerability to steal cookie-based...

WordPress plugin WP Slimstat 'wp-admin/admin.php' cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the WordPress plugin WP Slimstat 'wp-admin/admin.php', which can be exploited by an attacker ...

Zope 'manage_tabs_message' parameter cross-site scripting vulnerability

Zope is an open source web application server. A cross-site scripting vulnerability exists in the Zope 'managetabsmessage' parameter due to the program failing to properly filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or steal cookie-bas...

Multiple Cross-Site Scripting Vulnerabilities in Cisco Security Manager

Cisco Security Manager centralizes the task of configuring policies and controls for Cisco security deployments, enabling efficient management of enterprise-level security. Cisco Security Manager has multiple cross-site scripting vulnerabilities due to the program failing to properly filter...

CreA8social 'Add Game' Field HTML Injection Vulnerability

CreA8social is a social networking platform. An HTML injection vulnerability exists in the CreA8social 'Add Game' field, where attacker-supplied HTML or JavaScript code can run on the affected site. This allows an attacker to steal cookie-based authentication credentials and control the content...

Zeuscart has multiple vulnerabilities

Zeuscart is a very stable, interface-rich, open source shopping system. Zeuscart has multiple vulnerabilities due to the program failing to properly filter user-supplied input. An attacker can exploit this vulnerability to steal cookie-based authentication credentials, compromise the application,...