CVE-2015-7457

IBM WebSphere Portal is affected by a cross-site scripting (XSS) vulnerability, CVE-2015-7457, in versions 8.0.x prior to 8.0.0.1 CF20 and 8.5.x prior to 8.5.0.0 CF09. An attacker can inject arbitrary script or HTML by crafting a URL, potentially compromising a user session. The provided sources ...

CVE-2016-0243

IBM WebSphere Portal is affected by a cross-site scripting vulnerability (CVE-2016-0243) due to improper validation of user-supplied input, allowing remote attackers to inject script via a crafted URL. Affected versions include WebSphere Portal 6.1.x (6.1.0.x to 6.1.0.6 CF27, 6.1.5.x to 6.1.5.3 C...

SRC-2016-0002 : ATutor LMS Multiple Reflected Cross Site Scripting Vulnerabilities

Vulnerability Details: A total of 704 reflected Cross Site Scripting XSS vulnerabilities were found that can allow remote attackers to inject arbitrary web script or html via unspecified parameters against vulnerable installations of ATutor. User interaction is required to exploit this...

Cross site scripting

Cross-site scripting XSS vulnerability in logchat.cgi in Script Log-Chat before 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1157

CVE-2016-1157 is a stored XSS vulnerability in Script* Log-Chat's log_chat.cgi for versions prior to 2.0. A remote attacker can inject arbitrary web script/HTML, potentially executing in the victim’s browser. Affected product: Script* Log-Chat (Log-Chat) prior to version 2.0. Root cause: cross-si...

phpMyAdmin Multiple Vulnerabilities -03 (Feb 2016)

phpMyAdmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student role and entering a crafted survey...

Cross site scripting

Cross-site scripting XSS vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to 1 mod/scorm/player.php or 2...

Cross site scripting

Cross-site scripting XSS vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformattext call in ...

CVE-2015-5336

Multiple cross-site scripting XSS vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student role and entering a crafted survey...

CVE-2016-0725

Cross-site scripting XSS vulnerability in the searchpagination function in course/classes/managementrenderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string...

CVE-2015-3275

Multiple cross-site scripting XSS vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote attackers to inject arbitrary web script or HTML via a crafted organization name to 1 mod/scorm/player.php or 2...

CVE-2015-3274

Cross-site scripting XSS vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformattext call in ...

CVE-2015-5269

CVE-2015-5269 is a cross-site scripting (XSS) vulnerability in Moodle's group/overview.php that affects Moodle releases up to 2.9.2, including 2.6.11 and 2.7.x/2.8.x/2.9.x lines. The issue arises from unfiltered input in a grouping description, enabling remote authenticated users to inject arbitr...

CVE-2015-3274

Cross-site scripting XSS vulnerability in the usergetuserdetails function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows remote attackers to inject arbitrary web script or HTML by leveraging absence of an externalformattext call in ...

CVE-2016-0725

Moodle XSS vulnerability CVE-2016-0725 affects Moodle 2.8.x (pre-2.8.10), 2.9.x (pre-2.9.4), and 3.0.x (pre-3.0.2) in the search_pagination path of course/classes/management_renderer.php. The issue allows remote attackers to inject arbitrary JavaScript/HTML via a crafted search string due to insu...

CVE-2015-3275

The CVE-2015-3275 entry concerns Moodle’s SCORM module. Affected are Moodle versions up to 2.9.x before 2.9.1 (specifically 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, 2.9.x before 2.9.1). The vulnerability is a cross-site scripting (XSS) flaw achieved by supplying a crafted organization name...

CVE-2016-2045

Cross-site scripting XSS vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response...

CVE-2016-2043

Cross-site scripting XSS vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the normalization page...