GHSA-J838-VFPQ-FMF2 actionpack Cross-site Scripting vulnerability

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

actionpack Cross-site Scripting vulnerability

The sanitize helper in lib/actioncontroller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : colon characters in URLs, which makes it easier for remote...

actionpack Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in actionpack/lib/actionview/helpers/sanitizehelper.rb in the striptags helper in Ruby on Rails before 2.3.16, 3.0.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML...

dotCMS 4.1.1 XSS Vulnerability

dotCMS is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotcms:dotcms...

WordPress Influencer Marketing And Press Release System 2.2 XSS Vulnerability

Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Influencer Marketing & Press Release System plugin 2.2 Influencer Marketing & Press Release System plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplie...

WordPress Pootle Button 1.1.1 Cross Site Scripting

Class Input Validation Error Remote Yes Reflected Yes Credit Ricardo Sanchez Vulnerable Pootle button plugin 1.1.1 Pootle button plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Cross-Site Scripting (XSS)

woocommerce is vulnerable to cross-site scripting XSS attacks. The attacks can be launched because class-wc-admin-post-types.php does not sanitize the customermessage string...

boost: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=4946144398409728 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Cross-site Scripting (XSS)

genix/cms is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the id field in inc/lib/Control/Backend/menus.control.php, allowing a malicious user to inject and execute arbitrary web script...

Cross site scripting

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability...

Sql injection

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and eventform.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

Sql injection

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter...

Sql injection

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...

CVE-2017-1002020

Vulnerability in wordpress plugin surveys v1.01.8, The code in surveyform.php does not sanitize the action variable before placing it inside of an SQL query...

CVE-2017-8745

An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability"...

CVE-2017-8629

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

GSA Bounty: Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/local/ endpoint. The issue can be site-wide, and exploitable in any place, where pagination exist. The Impact and Severity I assigned the High severity, because unlike the last 263226 report that XSS was...

GSA Bounty: HTML injection (with XSS possible) on the https://www.data.gov/issue/ using media_url attribute

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/issue/ endpoint. Akamai WAF and bypass At the srart i was not able to do the XSS due to Akamai Waf XSS filters, but later, i was able to bypass it. POC HTML injection...

ZenCart Authentication Code Execution Vulnerability

ZenCart is an open source shopping cart system developed by Zen Cart team, it is mainly used to establish online stores, which can support a variety of payment methods, multi-language options, online shopping mall batch update and so on. A security vulnerability exists in the...

CVE-2017-11675

ZenCart 1.5.5e contains a vulnerability in traverseStrictSanitize within admin_dir/includes/classes/AdminRequestSanitizer.php. The sanitizer mishandles key strings, enabling remote authenticated users to execute arbitrary PHP code by injecting code into an invalid array index of the admin_name pa...