Landesk Management Suite 'serverlist_grouptree.aspx' Cross-Site Scripting Vulnerability

Landesk Management Suite is a system management solution. A cross-site scripting vulnerability exists in Landesk Management Suite 'serverlistgrouptree.aspx', which can be exploited by a remote attacker to construct a malicious URI and trick a user into parsing it, which can be used to obtain a...

Microsoft Internet Explorer Universal Cross-Site Scripting Flaw

A serious vulnerability has been discovered in all the latest versions of Microsoft's Internet Explorer that allows malicious hackers to inject malicious code into users' websites and steal cookies, session and login credentials. UNIVERSAL XSS BUG WITH SAME ORIGIN POLICY BYPASS The vulnerability ...

Roundcube Webmail Cross-Site Scripting Vulnerability (CNVD-2015-00913)

RoundCube Webmail is a browser-based, multi-language IMAP client. Roundcube Webmail suffers from a cross-site scripting vulnerability due to the program failing to properly filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or steal...

Asus RT-N10 Plus Router 'flag' parameter cross-site scripting vulnerability

The Asus RT-N10 Plus Router is a router device. A cross-site scripting vulnerability exists in the handling of the 'flag' parameter in the Asus RT-N10 Plus Router, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to...

WordPress Plugin Photo Gallery Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress plugin Photo Gallery has multiple cross-site scripting vulnerabilities due to the program failing to properly filte...

WordPress Plugin Blubrry PowerPress Podcast 'admin.php' Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Blubrry PowerPress Podcast 'admin.php' due to the program...

Marked Module Cross-Site Scripting Vulnerability

Marked Module is the Markdown parser. A cross-site scripting vulnerability exists in Marked Module because the program fails to properly filter user-supplied input. An attacker could use this vulnerability to execute arbitrary script code or steal cookie-based authentication credentials in the...

Kiwix Cross-Site Scripting Vulnerability

Kiwix is a free application for offline browsing of Wikipedia. Kiwix suffers from a cross-site scripting vulnerability due to the program failing to properly filter user-supplied input. An attacker could use this vulnerability to execute arbitrary script code or steal cookie-based authentication...

Unspecified Cross-Site Scripting Vulnerability in WebGUI

WebGUI is a CMS Content Management System software that is mainly used to facilitate the publishing and maintenance of website content. An unspecified cross-site scripting vulnerability exists in WebGUI because it fails to properly filter user-supplied input. An attacker may be able to exploit th...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Video Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal Video module because it fails to properly filter user-supplied input. An attacker could potentially exploit these vulnerabilities to execute arbitrary...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Room Reservations Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal Room Reservations module because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities to execute arbitrary script...

Multiple Symantec Products Cross-Site Scripting Vulnerabilities

Symantec Critical System Protection is a suite of intrusion detection software that defends against zero-day threats, strengthens systems, and assists in maintaining compliance.Symantec Data Center Security: Server Advanced is a system protection software from Symantec. A cross-site scripting...

WebsiteBaker 'modify.php' Cross-Site Scripting Vulnerability

WebsiteBaker is an open source PHP web content management system . A cross-site scripting vulnerability exists in WebsiteBaker 'modify.php' because the application fails to properly filter user-supplied input. An attacker may be able to exploit this issue to execute arbitrary script code in the...

Drupal Content Analysis Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Content Analysis module because it fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary script...

Multiple cross-site scripting vulnerabilities in Drupal nodeauthor module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal nodeauthor module because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities to execute arbitrary script code in...

Drupal Term Merge Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Term Merge module because it fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary script code ...

TechSmith Camtasia 'ProjectName_controller.swf' Cross-Site Scripting Vulnerability

TechSmith Camtasia a tool specialized in recording screen actions, it can easily record screen actions in any color mode, including images, sound effects, mouse tracks, narration sounds and more. A cross-site scripting vulnerability exists in TechSmith Camtasia 'ProjectNamecontroller.swf', which...

Fork CMS 'loadForm()' Function Cross-Site Scripting Vulnerability

Fork CMS is a CMS system developed in PHP. A cross-site scripting vulnerability exists in the Fork CMS 'loadForm' function due to the program failing to properly filter user-supplied input. An attacker could use this vulnerability to execute arbitrary script code or steal cookie-based...

Softbb.net SoftBB 'redir_last_post_list.php' cross-site scripting vulnerability

Softbb.net SoftBB is a WEB based application. Softbb.net SoftBB 'redirlastpostlist.php' suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack...

Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...