27443 matches found
Man-in-the-Middle (MitM)
firefox/thunderbird is vulnerable to man-in-the-middle attacks. The address bar can be spoofed by operating a proxy server that provides a 407 HTTP status code accompanied by a malicious web script...
Cross site scripting
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross-Site Scripting XSS vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15582
Cross-Site Scripting XSS vulnerability in adm/smsadmin/numbookwrite.php and adm/smsadmin/numbookupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15581
Cross-Site Scripting XSS vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross-Site Scripting XSS vulnerability in adm/boardgroupformupdate.php and adm/boardgrouplistupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15580
Cross-Site Scripting XSS vulnerability in adm/contentformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15582
Cross-Site Scripting XSS vulnerability in adm/smsadmin/numbookwrite.php and adm/smsadmin/numbookupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2019-11533
Cross-site scripting XSS vulnerability in ProjectSend before r1070 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15582
Cross-Site Scripting XSS vulnerability in adm/smsadmin/numbookwrite.php and adm/smsadmin/numbookupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15580
GnuBoard5’s adm/contentformupdate.php is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 5.3.1.6. The issue allows remote attackers to inject arbitrary web script or HTML. According to PT-2019-9126, affected software is Gnuboard5 before 5.3.1.6, with a suggested fix to...
CVE-2018-15584
CVE-2018-15584 is an XSS vulnerability in gnuboard5 prior to 5.3.1.6. The issue affects the administrative components adm/boardgroup_form_update.php and adm/boardgroup_list_update.php, where user-supplied input can be injected as script/HTML. This vulnerability is exploitable by remote attackers ...
CVE-2018-15581
Cross-Site Scripting XSS vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
CVE-2018-15581
The CVE-2018-15581 entry concerns gnuboard5: Cross-Site Scripting (XSS) in adm/faqmasterformupdate.php prior to version 5.3.1.6. The PT-2019-9127 document provides explicit affected versions and remediation: gnuboard5 versions before 5.3.1.6 are vulnerable due to an XSS in adm/faqmasterformupdate...
Cross site request forgery (csrf)
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...
CVE-2019-10864
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...
CVE-2019-10864
CVE-2019-10864 affects the WordPress WP Statistics plugin (up to version 12.6.2; referenced in multiple sources up to 12.6.3). The vulnerability is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script or HTML via the Referer header on a GET request. The O...