Cross site scripting

Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...

CVE-2015-4587

Cross-site scripting XSS vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu...

Just A Forum 2.1.1 Cross Site Scripting

| Title : Just aForum v2.1.1 XSS Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : http://www.dl.persianscript.ir/script/JustaForumv2.1.1PersianScript.ir.rar ======================================= Poc : Put in the search bo...

CVE-2015-3429

Cross-site scripting XSS vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier...

CVE-2015-3429

Cross-site scripting XSS vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2, allows remote attackers to inject arbitrary web script or HTML via a fragment identifier...

Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion

| Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download : http://demo.audiosharescript.com/ ======================================= XSS / HTML Inject :...

Cross site scripting

Cross-site scripting XSS vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms...

Cross site scripting

Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...

Microsoft Exchange multiple security vulnerabilities

XSS, CSRF, HTML injection...

CVE-2015-0343

Cross-site scripting XSS vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2015-0737

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

CVE-2015-3935

CVE-2015-3935 affects Dolibarr ERP/CRM versions 3.5 and 3.6. The vulnerability is a cross-site scripting (XSS) flaw exposed via the Business Search (search_nom) field, reachable on htdocs/societe/societe.php and htdocs/societe/admin/societe.php. The underlying issue is that user-supplied input is...

CVE-2015-2359

Cross-site scripting XSS vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Exchange HTML Injection Vulnerability."...

MS15-064: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3062157)

The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A server-side request forgery vulnerability exists in Microsoft Exchange web applications due to improper management of same-origin policy. An attacker can exploit this by...

CVE-2015-4427

CVE-2015-4427 affects Ektron Content Management System in versions before 9.10 SP1 (Build 9.1.0.184.1.114). The vulnerability is cross-site scripting (XSS) in Test/WorkArea/workarea.aspx, exploitable by remote authenticated users via the (1) page, (2) action, (3) folder_id, or (4) LangType parame...

Microsoft Exchange Server CVE-2015-2359 HTML Injection Vulnerability

Description Microsoft Exchange Server is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based...

Multiple vulnerabilities in vfront

vfront is a set of open source based on PHP and JavaScript MySQL or PostgreSQL database front-end management tools . There are multiple security vulnerabilities in vfront , allowing attackers to exploit vulnerabilities in cross-site scripting , cross-site request forgery , and HTML injection...

Unspecified Cross-Site Scripting Vulnerability in IBM Marketing Operations

IBM Marketing Operations formerly known as IBM Unica Marketing Operations is a suite of marketing management software from the American company IBM. The software supports streamlining of production processes, tracking of budgets and expenditures, and improved teamwork. An unspecified cross-site...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...