CVE-2018-16371

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=Usergroup&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=...

CVE-2018-16371

CVE-2018-16371 affects PESCMS Team 2.2.1 and involves multiple reflected XSS via the keyword parameter in four endpoints: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=. The provided documents iden...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

Design/Logic Flaw

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

CVE-2018-14500

joyplus-cms 1.6.0 has XSS via the manager/collect/collectvodzhuiju.php keyword parameter...

joyplus-cms cross-site scripting vulnerability (CNVD-2018-08675)

joyplus-cms is an efficient video movie website management system built with PHPmysql. A cross-site scripting vulnerability exists in manager/adminvod.php in joyplus-cms 1.6.0. The vulnerability can be exploited to conduct cross-site scripting attacks via the keyword parameter...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

Design/Logic Flaw

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

joyplus-cms 1.6.0 has XSS in manager/adminvod.php via the keyword parameter...

CVE-2018-10073

The CVE-2018-10073 entry applies to joyplus-cms 1.6.0, where a cross-site scripting vulnerability exists in manager/admin_vod.php via the keyword parameter. Root cause is improper handling of the keyword input leading to XSS. Documents state the affected software and vulnerable parameter but do n...

CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

usfca.edu XSS vulnerability

Open Bug Bounty ID: OBB-466666 Description| Value ---|--- Affected Website:| usfca.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

CVE-2017-17896

Readymade Job Site Script has XSS via the keyword parameter to the /job URI...

PHP Scripts Mall Readymade Job Site Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Readymade Job Site Script is a PHP based job site script by PHP Scripts Mall India. The script includes features like job management, profile management and email notifications. A cross-site scripting vulnerability exists in PHP Scripts Mall Readymade Job Site Script. A remote...

CVE-2017-17896

CVE-2017-17896 affects Readymade Job Site Script with a cross-site scripting (XSS) vulnerability via the keyword parameter to the /job URI. The NVD entry reports a base score of 4.3 (CVSS2) and 6.1 (CVSS3), indicating that network access is required and user interaction is involved in a changed s...

CVE-2017-17642

Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job...