CVE-2014-0639

Multiple cross-site scripting XSS vulnerabilities in EMC RSA Archer 5.x before GRC 5.4 SP1 P3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-3734

Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.x before 5.4 SP1 P3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The estimated number of...

CVE-2014-3841

The CVE-2014-3841 issue affects the WordPress Contact Bank Plugin (pre-2.0.20). The vulnerability is a stored/reflected XSS via the Label field tied to the plugin’s form layout configuration, allowing remote attackers to inject arbitrary script/HTML. Root cause: improper handling of input in the ...

PT-2014-3968

Name of the Vulnerable Software and Affected Versions IBM WebSphere Portal versions 7.0.0 through 7.0.0.2 CF27 IBM WebSphere Portal versions 8.0.0 through 8.0.0.0 CF11 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML...

CVE-2014-0956: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in googlemap.jsp in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4430

CVE-2013-4430 : The XSS vulnerability affects Mahara prior to 1.5.12, 1.6.x prior to 1.6.7, and 1.7.x prior to 1.7.3, allowing remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php. The connected documents confirm affected versions and the vulnerable vector, b...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in core/summaryapi.php in MantisBT 1.2.12 allow remote authenticated users with manager or administrator permissions to inject arbitrary web script or HTML via a 1 category name in the summaryprintbycategory function or 2 project name in the...

CVE-2013-5939

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the 1 list or 2 introduce parameter to index.php...

CVE-2013-2087

Multiple cross-site scripting XSS vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 movie title to modules/gallery/controllers/movies.php or 2 key variable to modules/gallery/views/erroradmin.html.php...

CVE-2014-1603

CVE-2014-1603 concerns multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 . According to the sources, an attacker can inject arbitrary web script or HTML via the (1) param parameter to admin/load.php, or (2) user , (3) email , or (4) name parameters in a Save Settings acti...

CVE-2011-5249: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment SNARE for Linux agent before 1.7.0 allows remote attackers to inject arbitrary web script or HTML via a logged shell command...

PT-2014-2811

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site scripting XSS issue exists in the Feed Element Mapper module for Drupal. This allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web...

PT-2014-3063

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 9.0 through 9.20 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For HP Network...

CVE-2013-6220: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Offiria 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to installer/index.php...

CVE-2014-0362

Cross-site scripting XSS vulnerability on Google Search Appliance GSA devices before 7.0.14.G.216 and 7.2 before 7.2.0.G.114, when dynamic navigation is configured, allows remote attackers to inject arbitrary web script or HTML via input included in a SCRIPT element...

PT-2016-6663

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.15 phpMyAdmin versions 4.4.x through 4.4.15.6 phpMyAdmin versions 4.6.x through 4.6.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including ...

Cross site scripting

Cross-site scripting XSS vulnerability in Citrix NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1899: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Citrix NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition 9.x before 9.3.66.5 and 10.x before 10.1.123.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...