BigTree-CMS 4.2.x < 4.2.4 Multiple Vulnerabilities

Binary data 9555.prm...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce. PoC...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce...

WordPress Form Builder Plugin <= 1.05 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...

K2 Joomla! Extension Cross Site Scripting

================================================================ K2 Joomla! Extension PoC: http://localhost/administrator/index.php?option=comk2&view=categori...

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress plugin Vospari Forms <= 1.3 - Reflected Cross-Site Scripting (XSS) vulnerability

WordPress plugin Vospari Forms version 1.3 vulnerable to Reflected Cross-Site Scripting XSS. Altering the URL would allow for the XSS to be executed for further exploitation. Solution Update plugin to the latest version at least version 1.4...

WordPress Woo Email Control Plugin <= 1.01 - Multiple Vulnerabilities

This plugin is prone to a reflected cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

Woo Email Control <= 1.01 - Reflected Cross-Site Scripting (XSS) & CSRF

Due to a lack of encoding and CSRF mitigation in the testemail function found on line 106 of classes/class-wooctrl.php, it is possible to automate a request to the AJAX handler for the wooctrlsendtestemail action which will reflect the specified script back to the end user...

WordPress Email Users Plugin <= 4.8.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Profile Builder < 2.4.2 - Reflected Cross-Site Scripting (XSS)

The User Registration & User Profile – Profile Builder WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Email Users <= 4.8.2 - Reflected Cross-Site Scripting (XSS)

The Email Users WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WSO2 SOA Enablement Server Cross Site Scripting

Title: WSO2 SOA Enablement Server - Reflected Cross Site Scripting Authors: Pawel Gocyla Date: 08. June 2016 Affected Software: ================== WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 Probably other versions are also vulnerable. Vulnerability: Reflected Cross Site...

OLX: Reflected Cross Site scripting Attack (XSS)

Hi Team, Vulnerable URL :- https://olx.qa/en/account/confirm/?email=&hash=26d7e919ff37300d2f363c9066dd5b9d&ts=14682640390036aalert1261db&p=0674cd7dFl22cq3mM5jZfwjNxZ7slA==&vk=0&utmsource=test&utmmedium=email&utmcampaign=link XSS will be trigger. Well as you guys mentioned in the report 150735 tha...

MGASA-2016-0237 Updated squidguard packages fix security vulnerability

The squidGuard.cgi program is vulnerable to a reflected cross site scripting vulnerability in the blocking script squidGuard.cgi. The vulnerability is triggered when a user clicks a link to a blocked site where the url has scripting instructions added CVE-2015-8936. In Mageia's squidguard package...

Adobe ColdFusion Security Update (APSB16-22)

Adobe ColdFusion is prone to a reflected cross site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMSA-2016-0009:VMware vCenter Server updates address an HIGH reflected cross-site scripting issue

VMSA-2016-0009 VMware vCenter Server updates address an important reflected cross-site scripting issue VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0009 VMware Security Advisory Synopsis: VMware vCenter Server updates address an important reflected cross-site scripting...

WordPress wpDiscuz Plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS)

This plugin is prone to a reflected cross site scripting vulnerability, because "Content-Type: application/json" is not set. Solution Update the plugin...

WSO2 SOA Enablement Server Cross Site Scripting

Title: WSO2 SOA Enablement Server - Reflected Cross-Site Scripting Authors: Jakub Pałaczyński, Łukasz Juszczyk Date: 08. April 2016 Affected Software: ============= WSO2 SOA Enablement Server for Java/6.6 build SSJ-6.6-20090827-1616 Probably other versions are also vulnerable. Proof of Concept:...

Web2py 2.14.5 - Multiple Vulnerabilities

Web2py 2.14.5 - Multiple Vulnerabilities Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati -...