491 matches found
PT-2019-11258
Name of the Vulnerable Software and Affected Versions: JspMyAdmin2 versions 1.0.6 and earlier Description: The issue concerns a Cross Site Scripting XSS vulnerability in the sidebar and table data. This vulnerability occurs because database fields are not properly sanitized, allowing code...
CVE-2019-1000004: Improper Neutralization of Input During Web Page Generation
yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting XSS vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection Cross-Site Scripting. This attack appears to be exploitable via the payload needs ...
Fedora 27 : php-horde-horde (2018-1de045298c)
Horde 5.2.20 - mjr SECURITY: Fix XSS vulnerability when rendering custom background colors in a sidebar row Bug 14857. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...
CVE-2016-9070
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...
CVE-2016-9070
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...
CVE-2016-9070
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...
CVE-2016-9070: Undefined Security Weakness
A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox 50...
Jenkins Sidebar Link Plugin Cross-Site Scripting Vulnerability
CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Sidebar Link plugin is one of the...
MyBB Recent Threads On Index 17.0 Cross Site Scripting
Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyBB forum. 2. Proof of concept:...
CVE-2017-1000088
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
CVE-2017-1000088
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
Input validation
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
CVE-2017-1000088: Improper Neutralization of Input During Web Page Generation
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
CVE-2017-1000088
The CVE concerns Jenkins Sidebar Link Plugin. The root cause is lack of input validation for sidebar entries configured by users, enabling javascript: schemes to be used in links. This leads to cross-site scripting (XSS) in affected Jenkins objects. Connected advisories (GHSA and CNVD variants) c...
CVE-2017-1000088
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
CVE-2017-1000088
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links...
PT-2017-10793
Name of the Vulnerable Software and Affected Versions Sidebar Link plugin affected versions not specified Description The issue concerns a lack of input validation in the Sidebar Link plugin, allowing users to configure jobs, views, and agents with links that use javascript: schemes. This could...
XSS in the url field on the password workspace grid and sidebar
More info at https://www.passbolt.com/incidents/20170914xssonresourceurls...