Atlassian Fisheye and Crucible cross-site scripting vulnerabilities (CNVD-2019-04924)

Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in Atlassian Fisheye and Crucible versions prior to 4.7.0...

HotelDruid Cross-Site Scripting Vulnerability

HotelDruid is a nine-point management system from the DigitalDruid.Net team. The system includes features such as room management, financial management and inventory management. A cross-site scripting vulnerability exists in HotelDruid version 2.3. A remote attacker can exploit this vulnerability...

WTCMS Cross-Site Scripting Vulnerability

WTCMS is a ThinkPHP-based content management system CMS. A cross-site scripting vulnerability exists in WTCMS version 1.0, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'statistic code' field...

ZoneMinder cross-site scripting vulnerability (CNVD-2019-04695)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. ZoneMinder 1.32.3 before the version of skins/classic/views/controlcap.php file has a cross-site scripting vulnerability , a remote attacker can use the newControl array with...

The vulnerability of the PAN-OS operating system arises from insufficient protection of the web page structure, allowing attackers to inject any desired JavaScript or HTML code into the loaded web page.

The vulnerability of the PAN-OS operating system exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

Cross-Site Scripting (XSS)

bootstrap-vue is vulnerable to cross-site scripting XSS. The option variable is not validated and sanitized, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser to steal session tokens or perform unwanted actions on behalf of the user...

Cleanto SQL Injection Vulnerability

Cleanto is an online booking system developed specifically for cleaning service companies. A SQL injection vulnerability exists in Cleanto version 5.0, which can be exploited by remote attackers to execute SQL commands with the 'serviceid' parameter...

Cacti cross-site scripting vulnerability (CNVD-2019-14551)

Cacti is an open source, web-based network monitoring and mapping tool, a front-end application designed for the data logging tool RRDtool. A cross-site scripting vulnerability exists in the 'Vertical Label' field of the graphtemplates.php file in versions of Cacti prior to 1.2.0, which stems fro...

Remote Injection Attacks

jenkins is vulnerable to remote injection attacks. The vulnerability exists as Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables...

CloudBees Jenkins Config File Provider Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task.Config File Provider Plugin is...

razorCMS Cross-Site Scripting Vulnerability (CNVD-2019-00810)

razorCMS is an open source content management system written in PHP, which stores all data in flat files, so there is no need to install a database. A cross-site scripting vulnerability exists in razorCMS version 3.4.8. A remote attacker can exploit this vulnerability by injecting HTML or script...

UCMS cross-site scripting vulnerability (CNVD-2019-01087)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the sadmin\cedit.php file in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

DouCo DouPHP Cross-Site Scripting Vulnerability (CNVD-2019-00995)

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/page.php?rec=edit in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

Q'center Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2019-03341)

QNAP Q'center Virtual Appliance is a virtual appliance from QNAP Systems for deploying Q'center QNAP NAS Management Platform in virtual environments such as Microsoft Hyper-V, VMware ESXi and Workstation. A cross-site scripting vulnerability exists in QNAP Q'center Virtual Appliance version...

CVE-2018-0724

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...

Synology DiskStation Manager Improper Escape Neutralization Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. An improper escape neutralization vulnerability exists in Log Exporter in Synology DSM versions prio...

WSTMart Product Inquiry Component Cross-Site Scripting Vulnerability

WSTMart is a set of e-commerce system of Guangzhou Shangtao Information Technology Co. A cross-site scripting vulnerability exists in the product consultation component of WSTMart version 2.0.8181212, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help ...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

Micro Focus NetIQ eDirectory Cross-Site Scripting Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...

Cross-Site Scripting (XSS)

phpmyadmin is vulnerable to cross-site scripting XSS. The attack exists because the database\table names in navigation tree are not properly escaped and allows a remote attacker to inject arbitrary Javascript into a victim's browser...