Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

Cross site scripting

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14712

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

CVE-2017-14716

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14712

Affected product: EPESI 1.8.2 rev20170830. Vulnerability: Stored XSS in the Tasks Phonecall Notes Title parameter. Root cause (per sources): unescaped input in that field allows script injection, enabling arbitrary script execution in the context of the user. Impact: described as cross-site scrip...

CVE-2017-14716

CVE-2017-14716 affects EPESI 1.8.2 rev20170830, where a Stored XSS exists in the Tasks Title parameter. The consolidated documents confirm the flaw is a stored cross-site scripting vulnerability in the Tasks Title field, with CVSS metrics indicating low severity for the base score (3.5) and a sin...

CVE-2017-14716

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

CVE-2017-14715

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

PT-2017-13645

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Title parameter until the issue is resolved. Consider restrictin...

PT-2017-13641

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Phonecall Notes Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Phonecall Notes Title parameter until the issue ...

CVE-2017-14716: Improper Neutralization of Input During Web Page Generation

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter...

CVE-2017-14715: Improper Neutralization of Input During Web Page Generation

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter...

PT-2017-13644

Name of the Vulnerable Software and Affected Versions EPESI version 1.8.2 rev20170830 Description The issue concerns Stored XSS in the Tasks Alerts Title parameter. Recommendations For EPESI version 1.8.2 rev20170830, avoid using the Tasks Alerts Title parameter until the issue is resolved. At th...

CVE-2017-14712: Improper Neutralization of Input During Web Page Generation

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter...

CVE-2017-14619

Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...

CVE-2017-14619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...

PT-2017-13585

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Title of your FAQ field in the Configuration Module. Recommendations For versions prior to...

Enterprise Edition Payment Processor Script 3.7 SQL Injection

Exploit Title: Enterprise Edition Payment Processor Script 3.7 - SQL Injection Dork: N/A Date: 14.09.2017 Vendor Homepage: https://www.goterhosting.com/ Software Link: https://www.goterhosting.com/payment-processor-script.php Demo: http://www.enterprise-edition.gvmhosting.com/ Version: 3.7...