313 matches found
CVE-2018-1000847
FreshDNS version 1.0.3 and prior contains a Cross Site Scripting XSS vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session. This attack appear to be exploitable via The attacker stores a specially crafted string as their Ful...
Cross site scripting
FreshDNS version 1.0.3 and prior contains a Cross Site Scripting XSS vulnerability in Account data form; Zone editor that can result in Execution of attacker's JavaScript code in victim's session. This attack appear to be exploitable via The attacker stores a specially crafted string as their Ful...
PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script is a set of online resume generating website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script version 2.0.6, which can be exploited by remote...
CVE-2018-15183
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15183
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
Cross site scripting
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15183
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields...
CVE-2018-15183
CVE-2018-15183 affects PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6. A stored XSS vulnerability exists in the Full Name and Title fields, enabling remote/script injection if user input is rendered without proper sanitization. Public documents corroborate a Cross-Site Scr...
PT-2018-12614 · Thomson Reuters · Thomson Reuters Ultratax Cs
Name of the Vulnerable Software and Affected Versions: Thomson Reuters UltraTax CS version 2017 Description: The software has a password protection option, but the level of protection may not meet some customers' expectations because the data is stored in cleartext. Customer data is stored in...
ClipperCMS Cross-Site Scripting Vulnerability (CNVD-2018-13274)
ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in ClipperCMS version 1.3.3. The vulnerability can be exploited by remote attackers to inject/store malicious scripts and execute them via the Full Name field of the Security - Manager Users or Security - W...
CVE-2018-13998
ClipperCMS 1.3.3 has stored XSS via the Full Name field of 1 Security - Manager Users or 2 Security - Web Users...
CVE-2018-13998
ClipperCMS 1.3.3 has stored XSS via the Full Name field of 1 Security - Manager Users or 2 Security - Web Users...
New Relic: Permissions leaks the full name of other NR accounts - Regression of #267636
One more before I run to dinner... Steps to Reproduce: 1. Add a user to your account 1. Enter "123" as the name and "[email protected]" as the email 1. Make them a "user" base role. 1. Click add user button. 2. Navigate to https://synthetics.newrelic.com/accounts/1523936/permissions 3. Create a...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6902
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
Deserialization of untrusted data
PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action...
CVE-2018-6902
Affected product: PHP Scripts Mall Image Sharing Script 1.3.3. Vulnerability: Cross-Site Scripting (XSS) via the Full Name field in an Edit Profile action. Root cause/details are not fully described in the provided documents beyond the XSS label. Impact ranges from low to medium according to CVSS...
CVE-2018-9130
IBOS 4.4.3 has XSS via a company full name...