6302 matches found
WordPress CP Contact Form with Paypal Plugin Scripting Vulnerability
WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.CP Contact Form with Paypal is a support for adding Paypal commonly used contacts to the Worpress website plugin. WordPress CP Contact Form with Paypal...
americatv.com.pe XSS vulnerability
Open Bug Bounty ID: OBB-73653 Description| Value ---|--- Affected Website:| americatv.com.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
krakvet.pl XSS vulnerability
Open Bug Bounty ID: OBB-73094 Description| Value ---|--- Affected Website:| krakvet.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Cross-site Scripting Vulnerability in Panavision OA Office System
Panavision OA Office System is a coordination office software. A cross-site scripting vulnerability exists in Panmicro OA Office System, which allows attackers to exploit the vulnerability to perform cross-site scripting attacks...
VulnCheck KEV: CVE-2012-3213
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting...
rosholt.k12.wi.us XSS vulnerability
Open Bug Bounty ID: OBB-69727 Description| Value ---|--- Affected Website:| rosholt.k12.wi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lakemills.k12.wi.us XSS vulnerability
Open Bug Bounty ID: OBB-69701 Description| Value ---|--- Affected Website:| lakemills.k12.wi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PHP pcnt_exec() function security bypass vulnerability
PHP is a general-purpose web programming language. The PHP pcntexec function accepts null values in paths and is vulnerable to a security bypass vulnerability. A remote attacker can submit special values to bypass security controls on path values...
999gag.com XSS vulnerability
Open Bug Bounty ID: OBB-62244 Description| Value ---|--- Affected Website:| 999gag.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2015-0727
Cross-site scripting XSS vulnerability in the HTTP module in Cisco Security Manager CSM 4.70SP11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789...
CVE-2015-0727
Cross-site scripting XSS vulnerability in the HTTP module in Cisco Security Manager CSM 4.70SP11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789...
Concrete5 5.7.3.1 Cross Site Scripting
Information -------------------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in Concrete5 Affected Software : Concrete5 Affected Versions: 5.7.3.1 and possibly below Vendor Homepage : https://www.concrete5.org Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID:...
SonicWall SonicOS crossite scripting
No description provided...
Unfixed XSS vulnerability at www.maybankard.net
Security researcher SaifuddinAmri, has submitted on 05/03/2015 a cross-site-scripting XSS vulnerability affecting www.maybankard.net, which at the time of submission ranked 166631 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It i...
Microsoft SharePoint CVE-2015-1640 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
CVE-2015-2933
Cross-site scripting XSS vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a LanguageConverter substitution string when using a language variant...
CVE-2015-2275
WoltLab Community Gallery 2.0 (pre-12/26/2014) is affected by a stored XSS via parameters[data][7][title] in the saveImageData action to index.php/AJAXProxy. The vulnerability enables arbitrary script/HTML injection and is documented with a PoC and public references. Fixed in Community Gallery 2....
CVE-2015-1632
The CVE-2015-1632 issue is a Cross-site scripting vulnerability in Outlook Web App (OWA) errorfe.aspx of Microsoft Exchange Server 2013 SP1 and Cumulative Update 7, exploitable via the msgParam parameter in an authError action. The root cause is improper sanitization of error messages in OWA, ena...
CVE-2015-1176-xss-osticket
CVE-2015-1176-xss-osticket Information ---------------- Advisory by Octogence. Name: Reflected XSS Vulnerability in osTicket Ticket system Affected Software : osTicket Affected Versions: 1.9.4 and possibly below Vendor Homepage : http://osticket.com/ Vulnerability Type : Cross-site Scripting...