Telaxus EPESI Cross-Site Scripting Vulnerability (CNVD-2017-11060)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

Telaxus EPESI cross-site scripting vulnerability (CNVD-2017-11061)

Telaxus EPESI is a Polish company Telaxus open source customer relationship management system based on PHP/Ajax framework CRM. The system provides schedule management , multi-user address book , proxy matters and other functions . A cross-site scripting vulnerability exists in Telaxus EPESI 1.8.2...

CVE-2017-9622

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

CVE-2017-9621

Cross-site scripting XSS vulnerability in modules/Base/Lang/Administrator/updatetranslation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 original or 2 new parameter...

CVE-2017-9623

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data...

Cybozu KUNAI for Android Cross-Site Scripting Vulnerability

Cybozu KUNAI for Android is an Android-based application from Cybozu, Inc. that allows you to quickly use Cybozu's licensed software. A cross-site scripting vulnerability exists in Cybozu KUNAI versions 3.0.0 through 3.0.6 for Android. A remote attacker can exploit the vulnerability to inject...

PivotX 'smarty_self' function cross-site scripting vulnerability

PivotX is an open source blog content management system Blog CMS. The system supports built-in comment review, spam protection and template replacement. PivotX 2.3.11 version of the modules/modulesmarty.php file of the 'smartyself' function of the cross-site scripting vulnerability , the...

Cross site scripting

Cross site scripting XSS vulnerability in pages.editform.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via the PATHINFO in an acp.php URL, due to use of unsanitized $SERVER'PHPSELF' to generate URLs...

Cross site scripting

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior ...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2017-09955)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

Symphony cross-site scripting vulnerability (CNVD-2017-07340)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in the publish/articles/new/ URI in Symphony version 2.6.11. A remote attacker can exploit this...

Cross site scripting

Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter...

PT-2017-15173

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.830 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting vulnerabilities. Recommendations For versions prior to...

MyBB cross-site scripting vulnerability (CNVD-2017-06578)

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A cross-site scripting vulnerability exists in the Email MyCode component in MyBB versions prior to 1.8.11. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

MediaWiki cross-site scripting vulnerability (CNVD-2017-06565)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A cross-site scripting vulnerability exists in the CSS user subpage preview...

DEBIAN-CVE-2016-6347

Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Philips In.Sight B120/37 Cross-Site Scripting Vulnerability

The Philips In.Sight B120/37 is a video monitoring device for infants from Philips Netherlands. A cross-site scripting vulnerability exists in the Philips In.Sight B120/37. Sight B120/37 can be exploited by a remote attacker to inject arbitrary web script or HTML via the name parameter...

CVE-2016-4892

Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2803

Cross-site scripting XSS vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML...

SLiMS 7 Cendana Cross-Site Scripting Vulnerability

SLiMS 7 Cendana is an open source, free library management system. A cross-site scripting vulnerability exists in the admin/modules component in SLiMS 7 Cendana on 2017-03-23 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...