CVE-2017-7425

CVE-2017-7425 corresponds to a cross-site scripting (XSS) vulnerability in NetIQ iManager Web UI. The connected CNVD entry confirms that versions prior to 2.7.7 Patch 10 HF2 and prior to 3.0.3.2 are affected, with a remote attacker able to execute arbitrary JavaScript in the context of the affect...

OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability

Summary OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. Description The vulnerability is caused due to the improper verification of uploaded files in...