Sophos PureMessage for UNIX Cross-Site Scripting Vulnerability

Sophos PureMessage for UNIX is a Unix-based antivirus software from Sophos UK, which is designed to protect against viruses, spam, and other security threats that attack users by e-mail. A cross-site scripting vulnerability exists in versions of Sophos PureMessage prior to 6.3.2 for UNIX-based...

WordPress Splashing Images plugin <=2.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Nicolas Buzy-Debat in WordPress Splashing Images plugin versions =2.1. Possible remote injection of arbitrary web script or HTML via the search parameter to wp-admin/upload.php. Solution Update the WordPress Splashing Images plugin to the latest...

CVE-2016-6217

Cross-site scripting XSS vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Atlassian JIRA Cross-Site Scripting Vulnerability (CNVD-2018-03271)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace.PieChart gadget is one of the pie chart tools. A cross-site scripting vulnerability exists in the PieChart gadget in Atlassian Ji...

TorrentFlux Cross-Site Scripting Vulnerability

TorrentFlux is a PHP-based BitTorrent download client that manages all Torrent downloads through a convenient web interface. A cross-site scripting vulnerability exists in TorrentFlux version 2.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

LiveZilla knowledgebase.php file cross-site scripting vulnerability

LiveZilla is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A cross-site scripting vulnerability exists in the...

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01287)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

WordPress WPGlobus plugin cross-site scripting vulnerability (CNVD-2018-01276)

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.WPGlobus plugin is used in one of the plugin used to create a multi-language blog. A cross-site scripting vulnerabili...

Zimbra Collaboration Suite Cross-Site Scripting Vulnerability

Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in versions of ZCS prior to 8.8.0 Beta2. A remote attacker can exploit this vulnerability to inject...

DragonByte Technologies vBShout for vBulletin Cross-Site Scripting Vulnerability

DragonByte Technologies vBShout for vBulletin is a module with posting and replying functionality for vBulletin, the open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the vbshout.php file in DragonByte Technologies...

CVE-2012-6671

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

WordPress GD Rating System plugin cross-site scripting vulnerability (CNVD-2018-00916)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...

CVE-2017-7998

Multiple cross-site scripting XSS vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the 1 printer name when adding a printer in the admin panel or 2 username parameter to webapp/users/userreg.jsp...

WordPress GD Rating System Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...

Zivif PR115-204-P-RS Remote Command Injection Vulnerability

The Zivif PR115-204-P-RS is a webcam device. A remote command injection vulnerability exists in Zivif PR115-204-P-RS version 2.3.4.2103. A remote attacker can exploit this vulnerability to inject arbitrary commands...

CVE-2017-17897

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Bernard Parisse Giac Parameter Injection Vulnerability

Bernard Parisse Giac is an open source computer algebra system written in C++ for Windows, Mac OS X, Unix and Linux. A security vulnerability exists in the Input.cc file in Bernard Parisse Giac version 1.2.3.57, which originates from the program failing to validate strings before starting the...

ScummVM Parameter Injection Vulnerability

ScummVM is a graphics engine for point-and-click adventure games. A security vulnerability exists in the backends/platform/sdl/posix/posix.cpp file in ScummVM version 1.9.0, which originates from a program that does not validate strings before starting the program. A remote attacker could exploit...

PHP Scripts Mall Event Search Script SQL Injection Vulnerability

PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...

DEBIAN-CVE-2017-17514

boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that this product does not use the BROWSER...