7 matches found
CVE-2021-27956
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...
CVE-2021-27956: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html/directory-search user search page via the e-mail address field...
CVE-2017-17794
validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...
CVE-2017-17794
validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...
CVE-2017-17794: Undefined Security Weakness
validateformpreferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field...
CVE-2011-4172: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...
CVE-2009-0743: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0517.0 aka 6.0 MR4 and 7.0 before 7.02 aka 7.0 MR1 allows remote authenticated users to inject arbitrary web script or HTML via the E-mail Address field...