8157 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter to dashboard/settings/categories/, 2 title or 3 rel parameter to dashboard/settings/links/, or 4 url parameter to...
PT-2015-6974
Name of the Vulnerable Software and Affected Versions Free Reprintables ArticleFR version 3.0.6 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several parameters, including the...
Nucleus CMS Cross-Site Scripting Vulnerability
Nucleus CMS is an open source PHP-based blog management software package developed by the Nucleus team. A cross-site scripting vulnerability exists in Nucleus CMS version 3.65. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'title'...
CVE-2015-5460
Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...
CVE-2015-5454
Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...
CVE-2015-5454
Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...
PT-2015-6921
Name of the Vulnerable Software and Affected Versions Nucleus CMS affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item. Recommendations At the moment, there is no...
PT-2015-6927
Name of the Vulnerable Software and Affected Versions Snorby version 2.6.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification. Recommendations For Snorby version 2.6.2...
Wordpress S3Bubble Cloud Video With Adverts & Analytics 0.7 - Arbitrary File Download Vulnerabil
Exploit for php platform in category web applications Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage:...
CVE-2015-5460: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in app/views/events/menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title cls.name variable when creating a classification...
CVE-2015-5454: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 account username, a 2 node title, or a 3 team entity title...
CVE-2014-9738
Multiple cross-site scripting XSS vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an 1 account username, a 2 node title, or a 3 team entity title...
WordPress S3Bubble Cloud Video With Adverts / Analytics Arbitrary File Download
Exploit Title: Wordpress S3Bubble Cloud Video With Adverts & Analytics - Arbitrary File Download Google Dork: inurl:/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/ Date: 04/07/2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: https://s3bubble.com Software Link:...
PT-2015-4372
Name of the Vulnerable Software and Affected Versions Tournament module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the account username, node title, or team entity title. This can lead...
GetSimple CMS suffers from multiple cross-site scripting vulnerabilities (CNVD-2015-04182)
GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in Cagintranet Networks GetSimple CMS versions prior to...
CVE-2015-5355
Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 post-content or 2 post-title parameter to admin/edit.php...
CVE-2015-5355: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 post-content or 2 post-title parameter to admin/edit.php...
PT-2015-6862
Name of the Vulnerable Software and Affected Versions GetSimple CMS versions prior to 3.3.6 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerable parameters are...
