Multiple Cross-Site Scripting Vulnerabilities in SAP NetWeaver

SAP NetWeaver is a service-oriented, integrated application platform. A cross-site scripting vulnerability exists in SAP NetWeaver, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

Multiple cross-site scripting vulnerabilities in Dolibarr ERP/CRM (CNVD-2016-00438)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system. The Dolibarr ERP/CRM htdocs/user/card.php script fails to adequately filter 'lastname', 'firstname', ' email', 'job', and 'signature' parameters, allowing remote attackers to exploit...

Alcatel-Lucent Home Device Manager Cross-Site Scripting Vulnerability

Alcatel-Lucent Home Device Manager is a device manager that allows you to manage and control your home network devices through a help desk. A cross-site scripting vulnerability exists in Alcatel-Lucent Home Device Manager, which allows remote attackers to exploit the vulnerability to inject...

Drupal RedHen CRM Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.RedHen CRM is one of the CRM modules. A cross-site scripting vulnerability exists in Drupal RedHen CRM, which allows remote attackers to exploit the vulnerability to inject malicious...

IBM InfoSphere Master Data Management - Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A cross-site scripting vulnerability in the IBM InfoSphere MDM - Collaborative EditionGDS component allows remote attackers to explo...

AVM FRITZ!OS Cross-Site Scripting Vulnerability

AVM FRITZ!OS is a set of operating systems used in Fritz!Box wireless router products. A cross-site scripting vulnerability exists in the Push-Service-Mails feature of AVM FRITZ!OS, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be us...

OpenCart Cross-Site Scripting Vulnerability

OpenCart is an open source e-commerce system. The OpenCart index.php script fails to adequately filter the 'zoneid' parameter, allowing remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2016-00161)

IBM Connections is a suite of social software platforms. The platform provides advanced analytics and real-time data monitoring capabilities and accelerates web collaboration within and outside the organization through IBM SmartCloud services. IBM Connections suffers from a cross-site scripting...

MiniBB 'index.php' Cross-Site Scripting Vulnerability

MiniBB is a free, open source Internet forum software. MiniBB suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to construct malicious URIs, trick users into parsing them, obtain sensitive cookies, hijack sessions or perform malicious operations on the...

SQLiteManager 'main.php' Cross-Site Scripting Vulnerability

SQLiteManager is a set of web-based SQLite database management tools that support multiple languages. SQLiteManager suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtai...

ASUS Japan WL-330NUL Device Cross-Site Scripting Vulnerability

The ASUS Japan WL-330NUL is a portable wireless LAN router from ASUS. The ASUS Japan WL-330NUL suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user...

MediaWiki wikilink cross-site scripting vulnerability

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki fails to adequately filter wikilinks, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTM...

TYPO3 'indexed_search' function cross-site scripting vulnerability

TYPO3 is a free and open source content management system. TYPO3's indexedsearch function suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijac...

CVE-2015-7936

Cross-site request forgery CSRF vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password...

TYPO3 'typoLink()' function cross-site scripting vulnerability

TYPO3 is a free and open source content management system. TYPO3 suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when...

Foreman cross-site scripting vulnerability (CNVD-2015-08438)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. A cross-site scripting vulnerability exists in the Foreman information pop-up box, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain...

Ipswitch WhatsUp Gold Cross-Site Scripting Vulnerability

Ipswitch WhatsUp Gold is a unified suite of infrastructure and application monitoring software. IPswitch WhatsUp Gold suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, obtain sensitive information o...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2015-08136)

IBM WebSphere Portal is a suite of enterprise portal software from IBM in the United States. A cross-site scripting vulnerability exists in IBM WebSphere Portal, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

PHP-Fusion 'administration/robots.php' HTML Injection Vulnerability

PHP-Fusion is an open source lightweight content management system based on MySql and PHP. An HTML injection vulnerability exists in PHP-Fusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

Sensio Labs Symfony Session Fixation Vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A session fixation vulnerability exists in the 'Remember M...