CVE-2019-9558

Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting XSS via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe...

CVE-2019-9725

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2019-9725

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

CVE-2019-9558

Mailtraq WebMail 2.17.7.3550 is affected by a Persistent Cross Site Scripting (XSS) vulnerability that can be triggered when a user opens an email containing malicious Javascript inserted as an iframe in the email body. The issue is server-side processing of email content that leads to XSS, enabl...

CVE-2019-9725

The CVE-2019-9725 entry describes a Persistent XSS flaw in the Web manager (Commander) of Korenix JetPort 5601 and 5601f devices, exploitable via the Port Alias field under Serial Setting. Affected component: Web UI; root cause: input in Port Alias not properly sanitized, enabling stored/reflecti...

CVE-2019-9557

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting XSS via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe...

Cross site scripting

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting XSS via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe...

PT-2019-19823

Name of the Vulnerable Software and Affected Versions Korenix JetPort versions 5601 and 5601f Description The issue concerns a Persistent XSS vulnerability in the Web manager also known as Commander of Korenix JetPort devices. This vulnerability is specifically found in the Port Alias field under...

PT-2019-19708

Name of the Vulnerable Software and Affected Versions Ability Mail Server version 4.2.6 Description The issue allows for Persistent Cross Site Scripting XSS via the email body. To exploit this, the victim must open an email containing malicious Javascript inserted into the body as an iframe...

CVE-2019-9557: Improper Neutralization of Input During Web Page Generation

Ability Mail Server 4.2.6 has Persistent Cross Site Scripting XSS via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe...

PT-2019-19709

Name of the Vulnerable Software and Affected Versions Mailtraq WebMail version 2.17.7.3550 Description The issue allows for Persistent Cross Site Scripting XSS via the body of an e-mail message. To exploit this, the victim must open an email with malicious Javascript inserted into the body of the...

CVE-2019-9558: Improper Neutralization of Input During Web Page Generation

Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting XSS via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe...

CVE-2019-9725: Improper Neutralization of Input During Web Page Generation

The Web manager aka Commander on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting...

PT-2019-9639

Name of the Vulnerable Software and Affected Versions TIBCO JasperReports Server versions up to and including 7.1.0 TIBCO JasperReports Server Community Edition versions up to and including 7.1.0 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.3 TIBCO Jaspersoft f...

Sparkasse - Multiple Persistent Cross Site Vulnerabilities

Document Title: =============== Sparkasse - Multiple Persistent Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2173 Release Date: ============= 2019-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

Sparkasse Cross Site Scripting

Document Title: =============== Sparkasse - Multiple Persistent Cross Site Scripting Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2173 Release Date: ============= 2019-03-07 Vulnerability Laboratory ID VL-ID:...

Sparkasse - Multiple Persistent Cross Site Vulnerabilities

Document Title: =============== Sparkasse - Multiple Persistent Cross Site Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2173 Release Date: ============= 2019-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

CVE-2018-18816: Improper Neutralization of Input During Web Page Generation

The repository component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS contains a persistent cross si...

PT-2019-19731

Name of the Vulnerable Software and Affected Versions TENGCONTROL T-920 PLC version 5.5 Description An issue allows remote attackers to cause a denial of service, resulting in a persistent failure mode. This can be achieved by sending a series of specific requests, identified as UID 0x43, to the...

WordPress Forminator Plugin CVE-2019-9567

Description Custom fields of a poll are not properly encoded when showing results of a poll, leading to persistent XSS. Successful exploitation allows an unauthenticated attacker to execute JavaScript in the context of the application in the name of an attacked user. This in turn enables an...