CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

UCMS Cross-Site Scripting Vulnerability (CNVD-2019-01088)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'description' parameter...

PT-2018-15156 · Razorcms · Razorcms

Name of the Vulnerable Software and Affected Versions: razorCMS version 3.4.8 Description: A stored XSS issue exists, allowing potential exploitation via the //page API endpoint, specifically through the description parameter. Recommendations: For razorCMS version 3.4.8, update to a version that...

CVE-2018-19906: Improper Neutralization of Input During Web Page Generation

Stored XSS exists in razorCMS 3.4.8 via the //page description parameter...

CVE-2018-20601

UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...

CVE-2018-20601: Improper Neutralization of Input During Web Page Generation

UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...

CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

CVE-2018-7996: Improper Neutralization of Input During Web Page Generation

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

CVE-2018-5967: Improper Neutralization of Input During Web Page Generation

Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page...

Cross site scripting

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16919: Improper Neutralization of Input During Web Page Generation

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting XSS vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter...

CVE-2017-16841

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

CVE-2017-16841: Improper Neutralization of Input During Web Page Generation

LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 project name parameter to project.php; the 2 usejs parameter to user.php; the 3 usejs parameter to group.php; the 4...

CVE-2015-2144

Multiple cross-site scripting XSS vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 project name parameter to project.php; the 2 usejs parameter to user.php; the 3 usejs parameter to group.php; the 4...