27444 matches found
CVE-2015-6584
Cross-site scripting XSS vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php...
CVE-2015-6584
Cross-site scripting XSS vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php...
rakuto.net hitSuji Cross-Site Scripting Vulnerability
rakuto.net hitSuji is an open source SNS social networking site software. A cross-site scripting vulnerability in rakuto.net hitSuji 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-2543
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."...
CVE-2015-2522
Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...
Cross site scripting
Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...
CVE-2015-2544
Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."...
CVE-2015-2522
Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...
CVE-2015-2536
The CVE-2015-2536 issue is an XSS vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015. The root cause is improper sanitization of input (notably via crafted URLs in the web context), enabling remote attackers to execute arbitrary script or HTML in a logged-in user’s bro...
MantisBT 1.1.2 - 1.2.17 XSS Vulnerability - Linux
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2015-2989
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...
CVE-2015-2989
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...
CVE-2015-5625
OpenDocMan before 1.3.4 is affected by a cross-site scripting (XSS) vulnerability due to a processing flaw in the redirection parameter. The affected product is the OpenDocMan document management system (PHP-based). Root cause: unsafe handling of the redirection parameter enables arbitrary web-sc...
CVE-2015-2989
CVE-2015-2989 (LEMON-S PHP Twit BBS) is a cross-site scripting (XSS) vulnerability in the index.php script caused by unsafely processing the imagetitle parameter. The affected software is the Twit BBS PHP-based bulletin board. Impact as stated: remote attackers can inject arbitrary web script or ...
CVE-2015-2986
Cross-site scripting XSS vulnerability in rakuto.net hitSuji rktSNS2 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-2985
Cross-site scripting XSS vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...