Multiple HTML Injection Vulnerabilities in Fortinet FortiVoice

The Fortinet FortiVoice phone system is designed to provide a simple, affordable and user-friendly package for handling intelligent calls. Multiple HTML injection vulnerabilities exist in Fortinet FortiVoice. Because the program fails to properly filter user-supplied input, an attacker could...

Multiple HTML Injection Vulnerabilities in Fortinet FortiCloud

Fortinet FortiCloud is a hosted security management and log retention service for the FortiGate product line. Multiple HTML injection vulnerabilities exist in Fortinet FortiCloud. Because the program fails to properly filter user input, an attacker could exploit the vulnerabilities to execute...

Red Hat Satellite HTML Injection Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. An HTML injection vulnerability exists in Red Hat Satellite version 6, whi...

Fortinet FortiManager and FortiAnalyzer HTML Injection Vulnerabilities

Fortinet FortiManager and Fortinet FortiAnalyzer are products of Fortinet, a centralized network security management solution; Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager is a centralized network security management solution; Fortinet...

HTTP CONNECT and 407 Proxy Authentication Required messages are not integrity protected

Overview HTTP CONNECT requests and 407 Proxy Authentication Required messages are not integrity protected and are susceptible to man-in-the-middle attacks. WebKit-based applications are additionally vulnerable to arbitrary HTML markup and JavaScript execution in the context of the originally...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.x through 7.0.0.2 CF30, 8.0.0.x through 8.0.0.1 CF21, and 8.5.0 before CF10 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

DEBIAN-CVE-2016-6634

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6634

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section...

WikWiki 2.1 Cross Site Scripting

Exploit Title: WikWiki - Reflected XSS Date: 2016-08-01 Exploit Author: HaHwul Vendor Homepage: https://github.com/smasty/WikWiki Software Link: https://github.com/smasty/WikWiki/archive/master.zip Version: v2.1 Tested on: DebianWhezzy CVE : none Vulnerability Point Edit page is not filtered...

Multiple Vulnerabilities in Wordpress Event-Registration Plugin

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Event-Registratio is one of the plugins for managing registrations and payments online. HTML injection vulnerability and SQL injection vulnerability exists in the Wordpress Event-Registration plugin, which can ...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Django CMS 'Groups' HTML Injection Vulnerability

Django CMS is Django Software Foundation of a set of open source based on the Django framework for content management systems . Django CMS suffers from an HTML injection vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

Multiple Vulnerabilities in ZOHO ManageEngine EventLog Analyzer

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. HTML injection vulnerabilities and cross-site scripting vulnerabilities exist in ZOHO ManageEngine EventLog Analyzer version 11.0 Build 11000. These vulnerabilities can be...

WordPress WP Advanced Comment Plugin HTML Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Software Foundation.WP Advanced Comment is one of the Ajax-based comment plugins. An HTML injection vulnerability exists in the WordPress WP Advanced Comment plugin. An attacker can exploit this vulnerabilit...

Thomson TWG850 has multiple vulnerabilities

The Thomson TWG850 is a router product from Thomson Reuters USA. The Thomson TWG850 suffers from HTML injection, authentication bypass, and cross-site request forgery vulnerabilities. An attacker could use these vulnerabilities to steal cookie-based authentication, execute arbitrary code in an...

Wordpress ProjectTheme has multiple vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.ProjectTheme is one of the plugins used to create project themes. Wordpress ProjectTheme has HTML injection, cross-site scripting, cross-site request forgery, and information disclosure...

Multiple Vulnerabilities in ZOHO ManageEngine Password Manager Pro

ZOHO ManageEngine Password Manager Pro PMP is a set of U.S. ZOHO ZOHO password management software. ZOHO ManageEngine PMP suffers from HTML injection, user enumeration, cross-site request forgery, power lifting, security bypass, and authentication bypass vulnerabilities. An attacker can exploit...

Multiple vulnerabilities in concrete5 (CNVD-2016-05229)

concrete5 is a free content management system CMS developed by Portland Labs in the United States. concrete5 5.7.3.1 and earlier versions contain 1. cross-site request forgery vulnerability 2. HTML injection vulnerability 3. local file inclusion vulnerability, a remote attacker can use these...

WordPress Jetpack Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Jetpack is one of the plugin packages that includes a variety of features such as social sharing, social login and social commenting. An HTML injection vulnerability exists in WordPress...