Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via a crafted chat message, aka Bug ID CSCuo89051...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobile sliding menu module 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer menu" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Video Consultation module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5494

Cross-site scripting XSS vulnerability in the Webform Matrix Component module 7.x-4.x before 7.x-4.13 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-6518

Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 srctrack, 2 usemfstmpsize, or 3 usemfsvarsize parameter to systemadvancedmisc.php; the 4 port, 5 snaplen, or 6 count parameter to diagpacketcapture.php...

CVE-2015-6510

pfSense

CVE-2015-6509

pfSense exposes multiple reflected XSS vulnerabilities (CVE-2015-6509) in the web GUI prior to version 2.2.3. The flaws allow remote attackers to inject arbitrary web script/HTML through numerous parameters across system_advanced_misc.php, system_advanced_firewall.php, and system_advanced_notific...

CVE-2014-9743

CVE-2014-9743 is a cross-site scripting (XSS) vulnerability in VideoLAN VLC Media Player prior to 2.2.0. The flaw is in the web interface’s httpd_HtmlError function (network/httpd.c) and allows remote attackers to inject arbitrary web script or HTML via the path info. Impact is remote code execut...

CVE-2015-5475

Multiple cross-site scripting XSS vulnerabilities in Request Tracker RT 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 user and 2 group rights management pages...

CVE-2015-5475

Multiple cross-site scripting XSS vulnerabilities in Request Tracker RT 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the 1 user and 2 group rights management pages...

Cross site scripting

Cross-site scripting XSS vulnerability in ajaxcmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter...

D-Link DCS-2103 HTML Injection Vulnerability

D-link DCS-2103 is a network camera product from AUO D-Link. An HTML injection vulnerability exists in the D-Link DCS-2103. A remote attacker can exploit this vulnerability to execute arbitrary HTML code in a browser context...

Koha HTML Injection Vulnerability

Koha is the first open source library automation system. Koha suffers from an HTML injection vulnerability that allows an attacker to execute attacker-supplied HTML and script code in the context of an affected browser...

Mozilla Firefox OS Cross-Site Scripting Vulnerability (CNVD-2015-05193)

Firefox OS is an open source mobile operating system with a Linux kernel for smartphones. Mozilla Firefox OS versions prior to 2.2, Gaia's Search application suffers from multiple cross-site scripting vulnerabilities in its implementation. A remote attacker could exploit these vulnerabilities to...

CVE-2015-2744

Cross-site scripting XSS vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitrary HTML via a crafted search link that is mishandled after re-opening the browser or opening the tab view...

CVE-2015-2745

Multiple cross-site scripting XSS vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the 1 name or 2 title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows...

The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Moodle learning management system’s sub-component “lib/javascript-static.js” exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using the IMG...