CVE-2015-2883: Improper Neutralization of Input During Web Page Generation

Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the name parameter to deviceSettings.php or shareDevice.php...

PT-2017-6619

Name of the Vulnerable Software and Affected Versions Philips In.Sight B120/37 Description The issue is related to the Weaved cloud web service and involves XSS. This can be demonstrated by the name parameter to "deviceSettings.php" or "shareDevice.php" endpoints. Recommendations For Philips...

imdbphp cross-site scripting vulnerability

imdbphp is a PHP library for retrieving movie and TV information from IMDb. A cross-site scripting vulnerability exists in imdbphp version 5.1.1, which stems from the imdbphp-master/demo/search.php URL failing to adequately filter the name parameter, and can be exploited by remote attackers to...

Joomla! Extra Search Component SQL Injection Vulnerability

Joomla! is a fairly well-known content management system in foreign countries. Extra Search is used in Joomla category management search system components. Extra Search is a component of Joomla that is used to manage category searches. An SQL injection vulnerability exists in the ESTABLENAME...

CVE-2016-8855

Cross-Site Scripting XSS in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 8.1 Update-3 allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2...

CVE-2016-8855

Cross-Site Scripting XSS in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 8.1 Update-3 allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2...

CVE-2016-8855: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 8.1 Update-3 allows remote attacks via the Name or Description parameter. This is fixed in 8.2 Update-2...

PT-2017-9846

Name of the Vulnerable Software and Affected Versions Sitecore Experience Platform version 8.1 rev. 160519 8.1 Update-3 Description The issue allows remote attacks via the Name or Description parameter in the "/sitecore/client/Applications/List Manager/Taskpages/Contact list" endpoint. This is a...

CVE-2010-4314: Improper Restriction of Operations within the Bounds of a Memory Buffer

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter...

Mini CMS 1.1 - name Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Mini CMS v1.1 - SQL Injection Google Dork: N/A Date: 07.03.2017 Vendor Homepage: http://www.icloudcenter.com/ Software : http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to 1 the media page, 2 the developer data edit page, or 3 the form page...

CVE-2015-8815

Multiple cross-site scripting XSS vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to 1 the media page, 2 the developer data edit page, or 3 the form page...

PT-2017-7801

Name of the Vulnerable Software and Affected Versions Zoneminder versions 1.30 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor. This could potentially lead to unauthorized access or...

CVE-2015-8815: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary web script or HTML via the name parameter to 1 the media page, 2 the developer data edit page, or 3 the form page...

PT-2017-7480

Name of the Vulnerable Software and Affected Versions Umbraco versions prior to 7.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to specific pages, including 1 the media page, 2 the developer data edit page, or 3 the form page...

SQL Injection Vulnerability in 'name' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

CVE-2014-9916

Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...

SQL Injection Vulnerability in Ocean CMS v_name Parameter

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the adminajax.php page of Ocean CMS 6.46 utf-8 official version. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

Multi-meter (DuomiCms) film and television management system v_name parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'vname' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

CVE-2016-10043

An issue was discovered in Radisys MRF Web Panel SWMS 9.0.1. The MSMMACRONAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use the pipe character | to inject arbitrary OS commands and retrieve the output in the application's...