Bookly #1 WordPress Booking Plugin (Lite) <= 13.2 – Unauthenticated Blind Stored XSS

An unauthenticated user can inject arbitrary persistent javascript code in the admin panel via Bookly plug-in...

Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting

Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting. CVE-2018-6655. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web:...

Multilanguage Real Estate MLM Script - Persistent Cross-Site Scripting

Multilanguage Real Estate MLM Script - Persistent Cross-Site Scripting. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: Multilanguage Real Estate MLM Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vend...

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting

Hot Scripts Clone Script Classified - Persistent Cross-Site Scripting. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: Hot Scripts Clone : Script Classified - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vend...

GitLab -- multiple vulnerabilities

GitLab reports: SnippetFinder information disclosure The GitLab SnippetFinder component contained an information disclosure which allowed access to snippets restricted to Only team members or configured as disabled. The issue is now resolved in the latest version. LDAP API authorization issue An...

Naukri Clone Script - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Naukri Clone Script - Stored XSS Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-scrip...

Naukri Clone Script - Persistent Cross-Site Scripting

Naukri Clone Script - Persistent Cross-Site Scripting. Webapps exploit for PHP platform. Tags: Cross-Site Scripting XSS Exploit Title: Naukri Clone Script - Stored XSS Date: 06.02.2018 Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage:...

Doctor Search Script 1.0.2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS. Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/ Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Zimbra < 8.8.3 Persistent XSS Vulnerability

Zimbra is prone to a persistent cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Cross site scripting

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-8783

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-17703

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

Cross site scripting

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

CVE-2017-8783

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-17703

Synacor Zimbra Collaboration Suite ZCS before 8.8.3 has Persistent XSS...

CVE-2017-8783

CVE-2017-8783: Zimbra Collaboration Suite (ZCS) before 8.7.10 is vulnerable to a persistent cross-site scripting (XSS) vulnerability. The issue is documented across multiple feeds (NVD, OpenVAS) as affecting Zimbra WebMail/Calendar/Address Book components before version 8.7.10. The connected docu...

CVE-2017-8783

Synacor Zimbra Collaboration Suite ZCS before 8.7.10 has Persistent XSS...

CVE-2017-17703

CVE-2017-17703 affects Synacor Zimbra Collaboration Suite (ZCS) before version 8.8.3, with a persistent cross-site scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD entry for CVE-2017-17703, OpenVAS note, CNVD entry) and is described as a persistent XSS in ZCS pr...