CVE-2018-9103

A CVE entry for CVE-2018-9103 describes a reflected cross-site scripting (XSS) vulnerability in Mitel MiVoice Connect’s conferencing component. Affected products are Mitel MiVoice Connect (R1707-PREM SP1 / 21.84.5535.0 and earlier) and Mitel ST (14.2 GA27 / 19.49.5200.0 and earlier). The issue ar...

CVE-2018-9101

Summary: CVE-2018-9101 is a reflected XSS vulnerability in the Mitel MiVoice Connect conferencing component. The issue affects Mitel MiVoice Connect versions R1707-PREM SP1 (21.84.5535.0) and earlier, and Mitel ST 14.2 GA27 (19.49.5200.0) and earlier. Root cause: insufficient validation on the la...

CVE-2018-9103

A vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 21.84.5535.0 and earlier, and Mitel ST 14.2, versions GA27 19.49.5200.0 and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting XSS attack due to insufficient...

st-peters-school.com XSS vulnerability

Open Bug Bounty ID: OBB-601949 Description| Value ---|--- Affected Website:| st-peters-school.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-guilhem-le-desert.fr XSS vulnerability

Open Bug Bounty ID: OBB-601947 Description| Value ---|--- Affected Website:| st-guilhem-le-desert.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-jean-colmar.fr XSS vulnerability

Open Bug Bounty ID: OBB-601948 Description| Value ---|--- Affected Website:| st-jean-colmar.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-louis.enquira.com XSS vulnerability

Open Bug Bounty ID: OBB-601864 Description| Value ---|--- Affected Website:| st-louis.enquira.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerabilities

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerability (CNVD-2018-07950)

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerability (CNVD-2018-07952)

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

Mitel Connect ONSITE and Mitel ST conferencing component PHP vulnerability (CNVD-2018-07949)

Mitel Connect ONSITE and Mitel ST are both products of Mitel Corporation of Canada.Mitel Connect ONSITE is a unified communications management appliance.ST is a video conferencing product.conferencing component is one of the components with conferencing capabilities. A security vulnerability exis...

Mitel ST conferencing component file upload vulnerability

Mitel ST is a video conferencing product from Mitel Canada. conferencing component is one of the conferencing components. A security vulnerability exists in the conferencing component of Mitel ST 14.2 GA28 and earlier versions. An attacker can exploit this vulnerability by sending a POST request ...

Mitel ST Information Disclosure Vulnerability

Mitel ST is a video conferencing product from Mitel Canada. A security vulnerability exists in Mitel ST 14.2 GA28 and prior versions. An attacker can exploit the vulnerability to determine a valid user ID and associated user name...

st-kittsnevis.com XSS vulnerability

Open Bug Bounty ID: OBB-590363 Description| Value ---|--- Affected Website:| st-kittsnevis.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-magdalen-ce.lancsngfl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-582444 Description| Value ---|--- Affected Website:| st-magdalen-ce.lancsngfl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

st-john-ce67.lancsngfl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-582442 Description| Value ---|--- Affected Website:| st-john-ce67.lancsngfl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

abbaye-stmaurice.ch XSS vulnerability

Open Bug Bounty ID: OBB-582416 Description| Value ---|--- Affected Website:| abbaye-stmaurice.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tileweb.ashmus.ox.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-582229 Description| Value ---|--- Affected Website:| tileweb.ashmus.ox.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5779

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using special...

CVE-2018-5781

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could...