PT-2018-2073 · D Link · D-Link Central Wifi Manager

Name of the Vulnerable Software and Affected Versions: D-Link Central WiFi Manager versions prior to 1.03r0100-Beta1 Description: The issue exists due to the lack of protection for the web page structure in the UpdateSite function of the D-Link Central WiFi Manager. This allows a remote attacker ...

Xiuno BBS Cross-Site Scripting Vulnerability

Xiuno BBS is an open source lightweight forum system. A cross-site scripting vulnerability exists in the 'sitename' parameter of the admin page in Xiuno BBS version 4.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2018-8942

Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter...

Design/Logic Flaw

Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter...

CVE-2018-8942

Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter...

PT-2017-18807 · Andrzuk · Finecms

Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the sitename parameter to the "admin.php" endpoint. Recommendations: For versions prior to 2017-05-28, as a temporary workaround, consider...

[eVuln.com] sitename XSS in Hot Links Lite

New eVuln Advisory: sitename XSS in Hot Links Lite Summary: http://evuln.com/vulns/143/summary.html Details: http://evuln.com/vulns/143/description.html -----------Summary----------- eVuln ID: EV0143 Software: Hot Links Lite Vendor: Mrcgiguy Version: 1.0 Critical Level: low Type: Cross Site...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sitename and 2 wmessage parameters...

CVE-2005-2886

Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via 1 the print parameter to the print module, the sitename parameter to 2 bbsmilies or 3 bbcoderef module, or 4 the hlpfile...