16175 matches found
CVE-2019-5926
Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
Fat Free CRM 0.19.0 HTML Injection
Exploit Title: Fat Free CRM v0.19.0 - HTML Injection Date: 2019-03-20 Exploit Author: Ismail Tasdelen Vendor Homepage: http://www.fatfreecrm.com/ Source Code : https://github.com/fatfreecrm Software : Fat Free CRM Product Version: v0.19.0 Vulnerability Type : Code Injection Vulnerability : HTML...
Design/Logic Flaw
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings...
Magento CMS Multiple Security Vulnerabilities
Description Magento CMS is prone to the following security vulnerabilities. 1. Multiple HTML-injection vulnerabilities 2. Multiple remote code execution vulnerabilities 3. Multiple cross-site scripting vulnerabilities 4. An information-disclosure vulnerability 5. An authorization-bypass...
CVE-2018-15583
Cross-Site Scripting XSS vulnerability in pointlist.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter...
CVE-2018-15583
Cross-Site Scripting XSS vulnerability in pointlist.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter...
CVE-2018-15583
GNUBOARD5 (web forum, PHP/MySQL) contains a Cross-Site Scripting (XSS) flaw in point_list.php, exploitable via the popup title parameter. Affected versions are prior to 5.3.1.6. The vulnerability could allow remote attackers to execute arbitrary web script/HTML. Remediation: upgrade to GNUBOARD5 ...
TCPDF 6.2.19 Deserialization / Remote Code Execution Exploit
TCPDF versions 6.2.19 and below suffer from a deserialization vulnerability that can allow for remote code execution. CVE-2018-17057: phar deserialization in TCPDF might lead to RCE --------------------------------------------------------------- Affected products ================= TCPDF While it ...
CVE-2019-7430
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
CVE-2019-7435
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...
CVE-2019-7438
cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...
CVE-2019-7438
cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...
CVE-2019-7432
PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...
CVE-2019-7432
PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...
Design/Logic Flaw
PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar...
Design/Logic Flaw
PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section...
Design/Logic Flaw
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form...
Design/Logic Flaw
cgi-bin/qcmapwebcgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter...