CVE-2017-7386

citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php model parameter...

PT-2017-17696

Name of the Vulnerable Software and Affected Versions citymont/symetrie version 0.9.6 Description The issue concerns a reflected XSS in the symetrie-master/app/commands/page.php file, specifically affecting the model parameter. Recommendations For citymont/symetrie version 0.9.6, consider...

ritewaypackaging.ca XSS vulnerability

Vulnerable URL: http://www.ritewaypackaging.ca/equiplist.php?model=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

PT-2014-5314

Name of the Vulnerable Software and Affected Versions Yealink VoIP Phones version 28.72.0.2 Description A CRLF injection issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to the servlet endpoint. Recommendations For...

CVE-2014-3427: Undefined Security Weakness

CRLF injection vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the model parameter to servlet...

CVE-2014-3428

Cross-site scripting XSS vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet...

Cross site scripting

Cross-site scripting XSS vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet...

PT-2014-5315

Name of the Vulnerable Software and Affected Versions Yealink VoIP Phones version 28.72.0.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the model parameter to the servlet. Recommendations For Yealink VoIP Phones version 28.72.0.2...

CVE-2014-3428: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Yealink VoIP Phones with firmware 28.72.0.2 allows remote attackers to inject arbitrary web script or HTML via the model parameter to servlet...

CVE-2013-5693

Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...

PT-2013-5729

Name of the Vulnerable Software and Affected Versions X2Engine X2CRM versions prior to 3.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via the model parameter to "index.php/admin/editor". This can lead to cross-site scripting XSS attacks. Recommendations F...

CVE-2013-5693: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in X2Engine X2CRM before 3.5 allows remote attackers to inject arbitrary web script or HTML via the model parameter to index.php/admin/editor...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...

CVE-2010-2256

Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...