PT-2014-7841

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.3 phpMyAdmin versions 4.1.x through 4.1.14.4 phpMyAdmin versions 4.2.x through 4.2.9.0 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM...

CVE-2014-3547: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge...

Cross site scripting

Cross-site scripting XSS vulnerability in php/useraccount.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2014-2975

Silver Peak VX prior to version 6.2.4 is affected by a reflected cross-site scripting (XSS) vulnerability in the /php/user_account.php module where the user_id parameter can inject arbitrary HTML/script into a user’s browser. Exploitation could arise from crafted input, as noted across CVE-2014-2...

Cross site scripting

Cross-site scripting XSS vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the jusername parameter to event/jsecuritycheck. Fixed in Version 10 Build 10000...

CVE-2014-5103

Cross-site scripting XSS vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the jusername parameter to event/jsecuritycheck. Fixed in Version 10 Build 10000...

CVE-2014-2971

Cross-site scripting XSS vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled textfield and a file field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Nexa Meridian before 2014 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4955

Cross-site scripting XSS vulnerability in the PMATRIgetRowForList function in libraries/rte/rtelist.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that i...

CVE-2014-4986

phpMyAdmin: CVE-2014-4986 summary — Multiple XSS vulnerabilities in js/functions.js affect phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6. The issue arises from improper handling when constructing an AJAX confirmation message, allowing remote authenticated users t...

CVE-2014-3885: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924...

CVE-2014-1992: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Customer Voice Portal CVP allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733...

CVE-2014-3325: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Customer Voice Portal CVP allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733...

CVE-2014-4346

CVE-2014-4346 is a cross-site scripting (XSS) vulnerability affecting Citrix NetScaler ADC/Gateway administration UI. SEC Consult and related sources indicate vulnerable releases include Citrix NetScaler VPX 10.0 and all 10.1 before 10.1-126.12, and 9.3 before 9.3-62.4. Fixed versions are 9.3-62....

CVE-2014-4945

Multiple cross-site scripting XSS vulnerabilities in Horde Internet Mail Program IMP before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via an unspecified flag in the basic 1 mailbox or 2 message view...

PT-2014-6225

Name of the Vulnerable Software and Affected Versions Horde Internet Mail Program IMP versions prior to 6.1.8 Horde Groupware Webmail Edition versions prior to 5.1.5 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified flags or...