PT-2020-7402

Name of the Vulnerable Software and Affected Versions: Telaen versions prior to 1.3.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the f email parameter in "index.php". Recommendations: For versions prior to 1.3.1, update to version 1.3.1 or later to...

Cross site scripting

Cross-site scripting XSS vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Nuri: HTML injection in email content

Summary: Hi, I just found an issue when register account in https://app.bitwala.com/onboarding/preliminary. It allow hacker injection malicious text include html code in email content. Steps To Reproduce: Make request register below with payload html in ==firstName== and ==lastName== parameter:...

CVE-2014-5039: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2020-7698

Name of the Vulnerable Software and Affected Versions Eucalyptus Management Console EMC versions 4.0.0 through 4.0.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions 4.0.0 through 4.0.1, update to version 4.0...

CVE-2013-4241

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

CVE-2013-2294

CVE-2013-2294 concerns ViewGit, with XSS vulnerabilities in the web UI prior to 0.0.7. The issues are triggered when a remote repository user injects malicious data via git branch or tag names, affecting the Shortlog table in templates/shortlog.php and the Heads table in plates/summary.php. The v...

CVE-2013-2294

Multiple cross-site scripting XSS vulnerabilities in ViewGit before 0.0.7 allow remote repository users to inject arbitrary web script or HTML via a 1 tag name to the Shortlog table in templates/shortlog.php or branch name to the 2 Shortlog table in templates/shortlog.php or 3 Heads table in...

CVE-2014-3718

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...

CVE-2013-0738

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...

Design/Logic Flaw

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...

CVE-2013-0738

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...

CVE-2013-0738

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...

CVE-2013-0738

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities affecting the pages blog.php and announcements.php . The root cause is improper input handling, enabling injected HTML/JavaScript in user-visible content. Affected versions and exact exploit details are not provided beyond the CVE ...

PT-2020-7335

Name of the Vulnerable Software and Affected Versions: Chamilo version 1.9.4 Description: The issue concerns multiple XSS and HTML Injection vulnerabilities. These vulnerabilities are found in the blog.php and announcements.php files. Recommendations: For Chamilo version 1.9.4, consider disabling...

CVE-2013-0738: Improper Neutralization of Input During Web Page Generation

Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php...

PT-2020-7488

Name of the Vulnerable Software and Affected Versions: HMS Testimonials plugin versions prior to 2.0.11 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including name, image, url, testimonial, date format, to various forms and settings...

Fifthplay S.A.M.I 2019.2_HP - Persistent Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Fifthplay S.A.M.I 2019.2HP - Persistent Cross-Site Scripting Exploit Author: LiquidWorm Vendor: Fifthplay NV Vendor Homepage: https://www.fifthplay.com Version: 2019.2HP Tested on: Linux CVE : - Fifthplay S.A.M.I - Service...

CVE-2013-4770

The CVE-2013-4770 entry corresponds to a Cross-site scripting (XSS) vulnerability in Eucalyptus Management Console (EMC) 4.0.x, with exploitation possible before 4.0.1. The affected product is EMC within Eucalyptus 4.0.x line; the vulnerability allows remote attackers to inject arbitrary web scri...

joyeriahiramabi.com.ve Cross Site Scripting vulnerability

Security Researcher geeknik Helped patch 8562 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting joyeriahiramabi.com.ve website and its users. Following...