1270 matches found
Dolibarr ERP/CRM Cross-Site Scripting Vulnerability
Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...
CVE-2017-14241
Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...
CVE-2017-14241
Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...
UBUNTU-CVE-2017-14241
Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...
CVE-2017-14241: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php...
Cross-site Scripting (XSS)
bolt/bolt is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when editing the title parameter for content...
Synology Video Station Cross-Site Scripting Vulnerability
Synology Video Station is a video manager from Synology.Video Metadata Editor is one of the video metadata editors. A cross-site scripting vulnerability exists in Video Metadata Editor in Synology Video Station versions prior to 2.3.0-1435. A remote attacker can exploit the vulnerability to injec...
CVE-2017-9556
Cross-site scripting XSS vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2017-9556: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Video Metadata Editor in Synology Video Station before 2.3.0-1435 allows remote authenticated attackers to inject arbitrary web script or HTML via the title parameter...
XYCMS b_title parameter has SQL injection vulnerability
XYCMS was formerly known as Nanjing XYCMS Enterprise Station Building System, which is a commercial station building system based on ASP development. A SQL injection vulnerability exists in the XYCMS btitle parameter. An attacker can exploit the vulnerability to obtain sensitive database...
PT-2017-16874
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.0.5 Description The issue allows an attacker to perform a Cross-Site Request Forgery CSRF attack on the "admin/languages/edit/1/" endpoint, enabling them to execute any Edit Language action. Additionally, the attacker can...
CVE-2017-6066: Cross-Site Request Forgery (CSRF)
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter...
CVE-2017-7255
XSS exists in the CMS Made Simple CMSMS 2.1.6 "Content--News--Add Article" feature via the m1title parameter. Someone must login to conduct the attack...
PT-2017-17614 · Cms Made Simple · Cms Made Simple
Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.1.6 Description: A security issue exists in the "Content--News--Add Article" feature of the software, where an attacker can exploit the m1 title parameter to conduct a cross-site scripting XSS attack. This attack...
CVE-2016-7783: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...
SQL Injection Vulnerability in BageCms
BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...
Mini Notice Board Cross-Site Scripting Vulnerability
Mini Notice Board 1.1 is an online bulletin board application that primarily facilitates the posting of trading announcements. A cross-site scripting vulnerability exists in the title and address parameters of the addcard.php page in Mini Notice Board 1.1. Due to the program failing to adequately...
PHP Press Release Cross-Site Scripting Vulnerability
PHP Press Release is a software that allows you to manage your organization's press releases via the web, and the public can access recent releases via the web. A stored cross-site scripting vulnerability exists in the title parameter of the administration.php page of PHP Press Release, which can...
SQL Injection Vulnerability in the Title Parameter of the Digital Newspaper System/www/index.php Page of Pleasant Reading Media
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=deliver&title=1, the vulnerability parameter is: title, the attacker can use the vulnerability to...
