PHP Server Monitor has multiple vulnerabilities

PHP Server Monitor is a set of open source Web-based tools used to monitor servers and Web sites . PHP Server Monitor suffers from cross-site scripting and elevation of privilege vulnerabilities that could be exploited by remote attackers to elevate privileges or obtain sensitive information and...

Techno Project Japan Enisys Gw Cross-Site Scripting Vulnerability

Techno Project Japan Enisys Gw is an open source groupware software from Techno Project Japan. A cross-site scripting vulnerability exists in Techno Project Japan Enisys Gw. The vulnerability allows remote attackers to inject malicious script or HTML code that, when viewed with malicious data,...

Infinite Automation Mango Automation Cross-Site Request Forgery Vulnerability

Infinite Automation Mango Automation is the United States Infinite Automation Systems, Inc. of a set of open source Web-based SCADA data acquisition and supervisory control, HMI and automation software. Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430, suffers from a...

TestLink 1.9.13 Cross Site Scripting

Information -------------------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in TestLink 1.9.13 Affected Software : TestLink Affected Versions: 1.9.1.3 and possibly below Vendor Homepage : http://testlink.org/ Vulnerability Type : Cross-site Scripting Severity : Important Status :...

Fortinet FortiManager GUI Cross-Site Scripting Vulnerability

Fortinet FortiManager is a centralized device management application. A cross-site scripting vulnerability exists in the Fortinet FortiManager SOMVpnSSLPortalDialog and FGDMngUpdHistory functions, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code,...

EMC RSA Archer GRC Cross-Site Scripting Vulnerability

EMC RSA Archer GRC is an enterprise IT governance and compliance governance product. EMC RSA Archer GRC suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitiv...

Web Reference Database Cross-Site Scripting Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. Multiple scripts in Web Reference Database fail to adequately filter multiple parameters, allowing remote attackers to exploit vulnerabilities t...

Splunk Cross-Site Scripting Vulnerability (CNVD-2015-06361)

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. Splunk suffers from a cross-site scripting vulnerability that allows remote attackers to...

Apache Struts Cross-Site Scripting Vulnerability (CNVD-2015-06370)

Apache Struts is an open source framework for creating enterprise Java Web applications. Apache Struts debug mode suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...

IBM OpenPages GRC Platform Cross-Site Scripting Vulnerability (CNVD-2015-06298)

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site scripting vulnerability exists in IBM OpenPages GRC Platform, which allows remote attackers to exploit the vulnerability to inject malicious scri...

IBM Content Navigator Cross-Site Scripting Vulnerability (CNVD-2015-06294)

IBM Content Navigator is a Web client that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which allows remote attackers to exploit the vulnerability to inject maliciou...

Aruba Networks Mobility Controller Cross-Site Scripting Vulnerability

Aruba Networks Mobility Controller is a suite of solutions that provide mobile access for the enterprise. A cross-site scripting vulnerability in Aruba Networks Mobility Controller allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

KnowledgeTree 'login.php' Cross-Site Scripting Vulnerability

KnowledgeTree is a Web-based open source document management system . A cross-site scripting vulnerability exists in KnowledgeTree login.php, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A cross-site scripting vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to...

Nokia Solutions And Networks Cross-Site Scripting Vulnerability

Nokia Solutions and Networks is a suite of solutions to help mobile networks run multiple services. A cross-site scripting vulnerability exists in Nokia Solutions And Networks, which could be exploited by remote attackers to inject malicious script or HTML code that, when viewed with malicious...

Symantec Web Gateway Cross-Site Scripting Vulnerability (CNVD-2015-06067)

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A cross-site scripting vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability to inject malicious script or...

Aol account hijack sessions 0day

hijacking sessions replaying information, to gain access to other account details. Usage Info you will need firefox live http headers FIXED for replay and the method below. This is private exploit. You can buy it at https://0day.today...

Coppermine Photo Gallery Cross-Site Scripting Vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...

Drupal Ctools Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. ctools is one of the API modules used to improve the development experience. A cross-site scripting vulnerability exists in the Drupal Ctools module, which allows remote attackers to exploit the vulnerability to inject...

Splunk Enterprise and Splunk Light Dashboard Cross-Site Scripting Vulnerability

Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. A cross-site scripting vulnerability exists in Dashboard for Splunk Enterprise and Splunk...