адвокат-в-томске.рф XSS vulnerability

Vulnerable URL:...

Multiple cross-site scripting vulnerabilities in Cisco WebEx Meeting Center (CNVD-2015-04700)

Cisco WebEx Meeting Center is a web-based online meeting product within a suite of WebEx meeting solutions. A cross-site scripting vulnerability in Cisco WebEx Meeting Center allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

Ikiwiki 'openid_identifier' parameter cross-site scripting vulnerability

Ikiwiki is a wiki compiler that supports the conversion of wiki pages into HTML pages for web publishing. Ikiwiki handles a cross-site scripting vulnerability in the 'openididentifier' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

AudioShare Cross-Site Scripting Vulnerability

AudioShare is an audio file manager. The AudioShare forgot.php script fails to properly handle the 'email' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user sessions whe...

Drupal EntityBulkDelete Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP.EntityBulkDelete is a module for bulk deletion of any type of entity. A cross-site scripting vulnerability exists in the Drupal EntityBulkDelete module, which allows remote attackers to exploit the vulnerability to inject...

Adobe Connect Cross-Site Scripting Vulnerability

Adobe Connect is an enterprise web conferencing solution. A cross-site scripting vulnerability exists in Adobe Connect, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions whe...

Novell ZENworks Mobile Management Cross-Site Scripting Vulnerability

Novell ZENworks Mobile Management is a mobile device management solution. A cross-site scripting vulnerability in the Novell ZENworks Mobile Management login form allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data,...

Drupal Webform module cross-site scripting vulnerability (CNVD-2015-03860)

Drupal is a free and open source content management system developed in PHP. webform is a market research questionnaire module. The Drupal Webform module handles view-based webform result forms with a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to...

WordPress Backup to Dropbox plugin cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress Backup to Dropbox is a plugin for backing up data to Dropbox. A cross-site scripting vulnerability exists in the WordPress Backup to Dropbox...

Microsoft Exchange Server Input Validation Cross-Site Scripting Vulnerability

Microsoft Exchange Server is an enterprise-class mail service program. An input validation vulnerability exists in Microsoft Exchange Server, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hija...

Drupal Web Links Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. web Links is one of the web link modules. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, whi...

Drupal Shipwire Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP language.Shipwire is a distribution query module. A cross-site scripting vulnerability exists in the Drupal Shipwire module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML...

Drupal Crumbs Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Crumbs, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...

Palo Alto Networks Pan-OS Management Interface Cross-Site Scripting Vulnerability

PAN-OS is a security-specific operating system designed to control Palo Alto Networks' next-generation firewalls, providing a rich set of firewall, management, and network features. A cross-site scripting vulnerability exists in the Palo Alto Networks Pan-OS WEB management interface, which allows...

Drupal Linear Case Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Linear Case, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

WordPress Google Analytics by Yoast Plugin HTML Injection Vulnerability

WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.Google Analytics by Yoast is one of the website analytics plugins. An HTML injection vulnerability exists in the WordPress Google Analytics by Yoast plugin, which allows remot...

Multiple cross-site scripting vulnerabilities in concrete5 private messages

Concrete5 is an open source content management software. Concrete5 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to exploit the vulnerabilities to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessio...

Pligg CMS 'dmin_page.php' HTML Injection Vulnerability

Pligg CMS is a content management system. An input validation vulnerability exists in Pligg CMS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious data is viewe...

Wing FTP Server Admin /admin_viewstatus.html Cross-Site Scripting Vulnerability

WingFTPServer is a professional cross-platform FTP server , it has good speed , reliability and a friendly configuration interface . A cross-site scripting vulnerability exists in Wing FTP Server Admin /adminviewstatus.html, which allows remote attackers to exploit the vulnerability to inject...

Drupal MailChimp Module Cross-Site Scripting Vulnerability

MailChimp Module for Drupal is a module application for Drupal. MailChimp Module for Drupal suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...