FluxCP 安全漏洞

FluxCP is an open source web-based control panel by rAthena. It is used for rAntha servers written in PHP. A security vulnerability exists in FluxCP versions prior to 1.3 that stems from unfiltered venders/buyers listings pages and store names that allow the execution of arbitrary javascript code...

Naver Whale Browser 安全漏洞

A cross-site scripting vulnerability exists in versions prior to 3.12.129.18 of Naver Whale Browser, a web browser from Naver Korea that supports user-defined interfaces, due to a lack of data validation filtering of user-supplied and output data. An attacker could exploit this to allow extension...

CVE-2010-2636: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL...