PT-2015-5953

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Inspector DDI versions prior to 3.5.1477 Trend Micro Deep Discovery Inspector DDI versions 3.6.x prior to 3.6.1217 Trend Micro Deep Discovery Inspector DDI versions 3.7.x prior to 3.7.1248 Trend Micro Deep Discovery...

CVE-2015-2872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Trend Micro Deep Discovery Inspector DDI on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web...

PT-2015-7277

Name of the Vulnerable Software and Affected Versions J2Store com j2store extension for Joomla! versions prior to 3.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sortby or manufacturer ids parameter to the "index.php" endpoint...

CVE-2015-6513: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the J2Store comj2store extension before 3.1.7 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 manufacturerids parameter to index.php...

BizIdea Design CMS 2015Q3 SQL Injection Vulnerability

BizIdea Design CMS 2015Q3 suffers from a remote SQL injection vulnerability. Document Title: =============== bizidea Design CMS 2015Q3 - SQL Injection Vulnerability Product & Service Introduction: =============================== http://www.bizidea.co.th Technical Details & Description:...

ektoplazm.com XSS vulnerability

Vulnerable URL: http://www.ektoplazm.com/index.php?s=x'"...

banggood.com XSS vulnerability

Vulnerable URL: http://www.banggood.com/index.php?com=indexid=undefined=loadLangNavs=http://www.banggood.com/buy/'"...

CVE-2015-5521

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

CVE-2015-5521

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

PT-2015-6968

Name of the Vulnerable Software and Affected Versions WideImage version 11.02.19 Description A cross-site scripting XSS issue exists in the applyConvolution demo of WideImage, allowing remote attackers to inject arbitrary web script or HTML via the matrix parameter to "demo/index.php"...

CVE-2015-5519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php...

CVE-2015-5521: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BlackCat CMS 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the name in a new group to backend/groups/index.php...

CVE-2015-2969

CVE-2015-2969 corresponds to a persistent XSS in LEMON-S PHP Simple Oekaki BBS before version 1.21. The vulnerability is triggered in index.php through the oekakis parameter, allowing remote attackers to inject arbitrary scripts/HTML. Affected software: Simple Oekaki BBS ≤ v1.20 (prior to 1.21). ...

CVE-2015-2969

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

PT-2015-6016

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter in t...

PT-2015-6017

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue allows remote attackers to delete arbitrary files. This is achieved via the oekakis parameter in the "index.php" file. Recommendations For versions prior to 1.21, updat...

JVN#67540183: Simple Oekaki BBS vulnerable to cross-site scripting

Simple Oekaki BBS provided by LEMON-S PHP contains a persistent cross-site scripting CWE-79 vulnerability due to the processing of oekakis parameter in index.php. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version...

CVE-2015-2970: Improper Limitation of a Pathname to a Restricted Directory

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...

CVE-2015-2969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...