Cross site scripting

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server"...

PT-2018-12556 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the "index.php?m=core&f=set&v=sendmail" API endpoint. The XSS payload is triggered wh...

Cross site scripting

Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...

CVE-2010-0936

Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...

CVE-2010-0936

Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...

CVE-2010-0936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...

CVE-2006-4090: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php...

[CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting

PoC : -------------------- 1 This flaw exists because the application does not validate the "nickname" variable upon submission to the post.php script via the POST method. hp://www.target/post.php?nickname="scriptalert'XSS'/script!-- --------------------...

CVE-2006-0407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...