CVE-2019-11846

/servlets/ajaxfileupload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection...

CVE-2019-11844

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter...

CVE-2019-11844

CVE-2019-11844 affects Ricoh SP 4520DN printers. The vulnerability is an HTML Injection in the web UI, exploitable via /web/entry/en/address/adrsSetUserWizard.cgi parameters entryNameIn or entryDisplayNameIn. Affected component: the web interface handling user/address fields; root cause is unsani...

CVE-2019-11845

An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

CVE-2019-11845

CVE-2019-11845 affects Ricoh SP 4510DN. An HTML Injection vulnerability exists in the CGI parameter /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn, enabling manipulation of the rendered page. Root cause: insufficient input validation/escaping in the affected web interface. Documented imp...

CVE-2019-11846

CVE-2019-11846 affects dotCMS 5.1.1 via the upload endpoint /servlets/ajax_file_upload?fieldName=binary3, enabling HTML Injection/XSS. Root cause: input handling in the upload path allows injected HTML/JS to be stored or reflected. Impact per sources: cross-site scripting with partial integrity i...

CVE-2019-11846

/servlets/ajaxfileupload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection...

XSS Vulnerability at JEESNS Group Comments

JEESNS is an open source social management system developed on JAVA's enterprise-class platform. JEESNS group comments at the existence of XSS vulnerability , an attacker can be exploited to inject arbitrary Web script or HTML...

CVE-2019-11845: Improper Neutralization of Input During Web Page Generation

An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter...

CVE-2019-11846: Improper Neutralization of Input During Web Page Generation

/servlets/ajaxfileupload?fieldName=binary3 in dotCMS 5.1.1 allows XSS and HTML Injection...

CVE-2019-11844: Improper Neutralization of Input During Web Page Generation

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter...

CVE-2019-7409

Multiple cross-site scripting XSS vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page, 2 gbs, 3 side, 4 id, 5 imgid, 6 cat, or 7 orderby parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page, 2 gbs, 3 side, 4 id, 5 imgid, 6 cat, or 7 orderby parameter...

Cross site scripting

Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...

PT-2019-12528

Name of the Vulnerable Software and Affected Versions dotCMS version 5.1.1 Description The issue concerns an HTML Injection and XSS vulnerability. It is related to the "/servlets/ajax file upload" endpoint, specifically when the fieldName parameter is set to binary3. Recommendations For dotCMS...

PT-2019-12527

Name of the Vulnerable Software and Affected Versions RICOH SP 4510DN affected versions not specified Description An HTML Injection issue has been found. It affects the /web/entry/en/address/adrsSetUserWizard.cgi API endpoint, specifically the entryNameIn parameter. Recommendations At the moment,...

PT-2019-12526

Name of the Vulnerable Software and Affected Versions RICOH SP 4520DN affected versions not specified Description An HTML Injection issue has been found. It affects the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter. Recommendations At the moment, there is...

RICOH SP 4520DN Printer - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH SP 4520DN Printer - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: https://www.ricoh-europe.com/products/office-printers-fax/single-function-printers/sp-4520dn.ht...

RICOH SP 4510DN Printer - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH SP 4510DN Printer - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: https://www.ricoh-europe.com/products/office-printers-fax/single-function-printers/sp-4520dn.ht...

RICOH SP 4510DN Printer - HTML Injection

RICOH SP 4510DN Printer - HTML Injection Exploit Title: RICOH SP 4510DN Printer - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: https://www.ricoh-europe.com/products/office-printers-fax/single-function-printers/sp-4520dn.htm...