10284 matches found
CVE-2018-19727
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-19727
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
Coppermine 1.5.46 Cross Site Scripting
Multiple Reflected Cross-site Scripting Vulnerabilities in Coppermine 1.5.46 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in Coppermine 1.5.46 Affected Software: Coppermine Affected Versions: 1.5.46 Homepage: http://coppermine-gallery.net/...
Mantis 2.11.1 Cross Site Scripting
Reflected Cross-site Scripting in Mantis 2.11.1 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting in Mantis 2.11.1 Affected Software: Mantis Affected Versions: 2.11.1 Homepage: https://www.mantisbt.org/ Vulnerability: Cross-site Scripting Severity: Mediu...
CVE-2018-19993
A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php...
CVE-2018-12651
A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...
CVE-2018-12651
CVE-2018-12651 : A reflected XSS vulnerability was reported in Adrenalin HRMS Software v5.4.0 where user-supplied input is echoed into JavaScript in the response of ShiftEmployeeSearch.aspx via the prntFrmName or prntDDLCntrlName parameters. The issue is triggered when crafted input is reflected ...
CVE-2018-12651
A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...
Cross site scripting
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter...
Sitecore CMS 8.2 - Cross-Site Scripting / Arbitrary File Disclosure Vulnerabilities
Exploit for asp platform in category web applications Exploit title: Sitecore CMS v8.2 multiple vulnerabilities Product: Sitecore Version: 8.2, Rev: 161221, Date: 21st December, 2016 Author: Usman Saeed Email: email protected Vendor Homepage: http://www.sitecore.net/ Disclaimer: Everything...
Cross site scripting
Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...
CVE-2018-18991
Reflected cross-site scripting non-persistent in SCADA WebServer Versions prior to 2.03.0001 could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser...
CVE-2018-18991
SpiderControl SCADA WebServer (versions prior to 2.03.0001) is affected by CVE-2018-18991: a reflected cross-site scripting (non-persistent) flaw caused by improper input neutralization during web page generation. An attacker can craft a URL to execute JavaScript in a victim’s browser. Mitigation...
CubeCart 6.2.2 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 Information -------------------- Advisory by Netsparker Name: Reflected Cross-site Scripting Vulnerability in CubeCart Affected Software: CubeCart Affected Versions: 6.2.2 Homepage...
CVE-2018-1002002
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit...
CVE-2018-12241
The Symantec Security Analytics SA 7.x prior to 7.3.4 Web UI is susceptible to a reflected cross-site scripting XSS vulnerability. A remote attacker with knowledge of the SA web UI hostname or IP address can craft a malicious URL for the SA web UI and target SA web UI users with phishing attacks ...
CVE-2018-15714
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the oname and oname2 parameters...
CVE-2018-15712
Nagios XI 5.5.6 allows reflected cross site scripting from remote unauthenticated attackers via the host parameter in apitool.php...
CVE-2018-15712
Nagios XI 5.5.6 is affected by CVE-2018-15712: a reflected cross-site scripting flaw exploitable by remote unauthenticated attackers via the host parameter in api_tool.php. The issue is documented across multiple feeds (NVD, CNVD, CVE listings, and advisories) with consistent description of remot...