11 matches found
EUVD-2018-3651
Malware in sbrugna...
EMS Master Calendar Cross-Site Scripting Vulnerability
EMS Master Calendar is a schedule management system from EMS Software, USA. The system provides instant access to dates and locations. A cross-site scripting vulnerability exists in versions prior to EMS Master Calendar 8.0.0.201805210, where the program fails to properly filter user-submitted...
mastercalendar.smcm.edu XSS vulnerability
Open Bug Bounty ID: OBB-628403 Description| Value ---|--- Affected Website:| mastercalendar.smcm.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
EMS Master Calendar Cross Site Scripting
Exploit Title: EMS Master Calendar alert'XSS'xyz...
EMS Master Calendar < 8.0.0.20180520 - Reflected Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: EMS Master Calendar alert'XSS'xyz 0day.today 2018-06-05...
EMS Master Calendar 8.0.0.20180520 - Cross-Site Scripting
EMS Master Calendar 8.0.0.20180520 - Cross-Site Scripting Exploit Title: EMS Master Calendar alert'XSS'xyz...
EMS Master Calendar < 8.0.0.20180520 - Cross-Site Scripting
Exploit Title: EMS Master Calendar alert'XSS'xyz...
CVE-2018-11628
Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS...
Cross site scripting
Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS...
CVE-2018-11628
Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malicious attackers to send a crafted URL for XSS...
CVE-2018-11628
EMS Master Calendar before 8.0.0.201805210 is affected by a cross-site scripting (XSS) vulnerability where data input via URL parameters is not properly sanitized. Root cause: insufficient input filtering in the web application, enabling a crafted URL to execute script in a user’s browser. Docume...