PT-2019-13691

Name of the Vulnerable Software and Affected Versions WEB STUDIO Ultimate Loan Manager version 2.0 Description The issue exists due to the presence of a cross-site scripting XSS flaw. This flaw can be exploited by adding a branch under the Branches button and setting the notes parameter with...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

PT-2019-12314

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the notes parameter in the "notes.php" endpoint. Recommendations For I, Librarian versio...

CVE-2019-11449: Improper Neutralization of Input During Web Page Generation

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2011-5206

Cross-site scripting XSS vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter...

PT-2012-2183

Name of the Vulnerable Software and Affected Versions Rapidleech versions prior to 2.3 rev42 SVN r399 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the notes parameter in the notes.php file. This enables attackers to execute...

CVE-2011-5206: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in notes.php in Rapidleech before 2.3 rev42 SVN r399 allows remote attackers to inject arbitrary web script or HTML via the notes parameter...

CVE-2012-4278: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...