660 matches found
CVE-2018-9330
register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...
CVE-2018-9330
register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942...
CVE-2018-5716
An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...
CVE-2018-5672
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php formfield5label parameter...
CVE-2017-16414
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
Design/Logic Flaw
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
PT-2017-19197
Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.3.7 through 2.3.33 Apache Struts versions 2.5 through 2.5.12 Description The issue allows remote attackers to cause a denial of service by entering a specially crafted URL in a form field, overloading the server proces...
Apache OFBiz JavaScript Code Injection Vulnerability
Apache OFBiz is an enterprise resource planning system from the Apache Software Foundation in the United States. A security vulnerability in the Apache OFBiz processing form field allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary JavaScript cod...
CVE-2016-6800
The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not...
Code injection
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12...
CVE-2017-7672
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12...
CVE-2017-6067
Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...
Design/Logic Flaw
Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...
CVE-2017-6067
Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...
CVE-2017-6067: Improper Neutralization of Input During Web Page Generation
Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...
PT-2017-16875
Name of the Vulnerable Software and Affected Versions Symphony version 2.6.9 Description The issue concerns a problem with the software where an attacker can inject malicious code. This is possible through the publish/notes/edit//saved/ endpoint, specifically via the bottom form field...
CVE-2017-6591
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field...
Cross site scripting
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field...
