OpenCart-Overclocked Cross-Site Scripting Vulnerability

OpenCart-Overclocked is an open source shopping cart application. A cross-site scripting vulnerability exists in upload/admin/view/template/extension/openbay.tplL95 in OpenCart-Overclocked 1.11.1 and earlier versions, which stems from the program not filtering user input. A remote attacker could...

FlightAirMap Cross-Site Scripting Vulnerability

FlightAirMap is a free, open source application developed using PHP for displaying flights on a map. A cross-site scripting vulnerability exists in the GET variable on the Registration sub-menu page in FlightAirMap 1.0-beta.21 and earlier versions. A remote attacker can exploit this vulnerability...

CVE-2018-1000642

FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...

CVE-2018-1000640

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

Cross site scripting

OpenCart-Overclocked version =1.11.1 contains a Cross Site Scripting XSS vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of service. This attack appear to be...

CVE-2018-1000642

FlightAirMap version =v1.0-beta.21 contains a Cross Site Scripting XSS vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09...

CVE-2018-1000640

OpenCart-Overclocked (

CVE-2018-1000642

FlightAirMap affected version:

PT-2018-9495

Name of the Vulnerable Software and Affected Versions FlightAirMap versions =v1.0-beta.21 Description The issue concerns a Cross Site Scripting XSS vulnerability in the GET variable used within the registration sub-menu page. This can lead to unauthorized actions, access to data, and the theft of...

PT-2018-9493

Name of the Vulnerable Software and Affected Versions OpenCart-Overclocked version =1.11.1 Description The issue concerns a Cross Site Scripting XSS vulnerability. It occurs when user input is entered unsanitised within a JS function in the template, potentially resulting in unauthorised actions,...

Jirafeau Cross-Site Scripting Vulnerability

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the 'search file by hash' form in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to steal sessions and gain administrative privileges...

Jirafeau Cross-Site Scripting Vulnerability (CNVD-2018-12870)

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the 'search file by link' form in Jirafeau versions prior to 3.4.1. A remote attacker can use this vulnerability to steal sessions and gain administrative privileges...

CVE-2018-13409

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

CVE-2018-13409

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

CVE-2018-13409

CVE-2018-13409 affects Jirafeau prior to 3.4.1. The vulnerability is a reflected XSS in the "search file by hash" form, which could allow an attacker to target an administrator, steal a session, and gain administrative privileges. The connected sources consistently describe this XSS flaw and its ...

CVE-2018-13408

An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

CVE-2018-13409

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

CVE-2018-13409: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator, stealing a session and gaining administrative privileges...

PT-2018-11805

Name of the Vulnerable Software and Affected Versions Jirafeau versions prior to 3.4.1 Description An issue was discovered that affects the "search file by link" form, which is vulnerable to reflected XSS. This could allow an attacker to steal a session and gain administrative privileges by...

CVE-2018-13002

An XSS issue was discovered in Inhaltsprojekte in Weblication CMS Core & Grid v12.6.24. The vulnerability is located in the wFilemanager.php and index.php files of the /grid5/scripts/ modules. The injection point is located in the Project Title and the execution point occurs in the Inhaltsprojekt...