Nullsoft Shoutcast Server Request Log CrossSite Scripting - Ver2 (CVE-2007-1229)

A cross-site scripting vulnerability has been reported in Nullsoft Shoutcast Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

PT-2015-5844

Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Websense V-Series appliances version 7.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the ws-userip in the ws-encdata parameter to...

Asus RT-G32 Router Cross-Site Scripting Vulnerability

ASUS RT-G32 is a wireless router product from ASUS. A cross-site scripting vulnerability exists in the Asus RT-G32 router. The vulnerability exists because the startapply.htm script fails to adequately filter 'nextpage', 'groupid', 'actionscript ' and 'flag' parameters. A remote attacker could us...

CVE-2015-0105

CVE-2015-0105 is an XSS vulnerability in IBM BPM’s Process Portal affecting BPM Standard/Express/Advanced 8.0.x before 8.0.1.3, 8.5.0 before 8.5.0.1, and 8.5.5 before 8.5.5.0. Root cause: improper validation/filtering of user-supplied input, allowing a crafted URL to execute script in a user’s br...

PT-2015-5833

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. The parameters next page, group id, action script, or flag in the "start...

CVE-2015-2349

The CVE-2015-2349 entry describes a cross-site scripting (XSS) vulnerability in SuperWebMailer’s defaultnewsletter.php affecting version 5.60.0.01190 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the HTMLForm parameter, enabling script execution in a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrative backend in MyBB aka MyBulletinBoard before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the 1 MIME-type field in an add action in the config-attachmenttypes module to admin/index.php; 2...

PT-2015-5720

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.8.4, update to version 1.8.4 or later to resolve the...

CVE-2014-6144: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Quality Manager RQM 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-2241

Cross-site scripting XSS vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a model attribute in ModelAdmin.readonlyfields, as demonstrated by a @property...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ZeusCart 4 allow remote attackers to inject arbitrary web script or HTML via the 1 schltr parameter in a brands action or 2 brand parameter in a viewbrands action to index.php. NOTE: The search parameter vector is already covered by CVE-2010-53...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenKM before 6.4.19 build 23338 allows remote authenticated users to inject arbitrary web script or HTML via the Subject field in a Task to frontend/index.jsp...

CVE-2010-5322

Cross-site scripting XSS vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php...

PT-2015-5023

Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus versions prior to 6.2 Build 6270 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the technicianSearchText parameter to the "Help Desk Technician" page o...

CVE-2015-2217

Multiple cross-site scripting XSS vulnerabilities in Ultimate PHP Board aka myUPB before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or 2 avatar parameter to profile.php...

PT-2015-5408

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Foundation 2013 versions Gold and SP1 Microsoft SharePoint Server 2013 versions Gold and SP1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted request. An...

PT-2015-5685

Name of the Vulnerable Software and Affected Versions Webshop hun version 1.062S Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters in index.php, specifically the param, center, lap, termid, or nyelv id parameters. Recommendations For...

CVE-2015-0893

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0892

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...