IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability

IBM Rational DOORS Next Generation captures, tracks, analyzes and manages requirements while maintaining compliance with industry standards and regulations. A cross-site scripting vulnerability exists in IBM Rational DOORS Next Generation, which allows remote attackers to exploit the vulnerabilit...

b3log Symphony Cross-Site Scripting Vulnerability

b3log Symphony aka Sym is an open source set of modern community platforms written in the Java language, including forums, BBS, SNS and blogs. A cross-site scripting vulnerability exists in b3log Symphony version 2.2.0. A remote attacker can exploit this vulnerability by sending a specially craft...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-37837)

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

SQL injection vulnerability in YxtCMF frontend ShitiController.class.php page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A SQL injection vulnerability exists in the YxtCMF frontend ShitiController.class.php page. The vulnerability is due to the system failing to effectively filter...

testedich.de XSS vulnerability

Vulnerable URL: http://www.testedich.de/search.php3?quiz=toto%22%3E%0D%0A%3Cimg/src=%22x%22%20onerror=%22document.writeString.fromCharCode60,115,99,114,105,112,116,62,97,108,101,114,116,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41,60,47,115,99,114,105,112,116,62%22%3E%3C!--...

CVE-2017-16765

XSS exists on D-Link DWR-933 1.00WWB17 devices via cgi-bin/gui.cgi...

Vonage HT802 Cross-Site Scripting Vulnerability

The Vonage Grandstream HT802 devices is a home gateway device from Vonage USA. A cross-site scripting vulnerability exists in /cgi-bin/config2 on Vonage Grandstream HT802 devices. A remote user can exploit the vulnerability to inject arbitrary web script or HTML via the DHCP vendor class ID field...

Apache jUDDI Cross-Site Scripting Vulnerability

Apache jUDDI is the United States Apache Apache Software Foundation of a Java-based , open source follow the UDDI standard application . A cross-site scripting vulnerability exists in versions of Apache jUDDI prior to 2.0. A remote attacker can exploit this vulnerability by sending the 'dsname'...

zingst.de XSS vulnerability

Vulnerable URL: https://www.zingst.de/unterkunftsuche?secraabreise=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1376787 VIP website...

CVE-2017-15381

SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php aka the zip code search script...

CVE-2017-10410

Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: Search. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network...

Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiWLC (CNVD-2017-32268)

The Fortinet FortiWLC is a network management appliance. FortiWLC versions 6.1-2, 6.1-4, 6.1-5, FortiWLC 7.0-7, 7.0-8, 7.0-9, 7.0-10, and FortiWLC 8.0, 8.1, 8.2, 8.3.0-8.3.2 contain multiple cross-site scripting vulnerabilities in their implementations, which can be exploited by attackers to...

EMC RSA Archer GRC Platform Cross-Site Scripting Vulnerability

EMC RSA Archer GRC Platform is an enterprise IT governance and compliance governance product from EMC Corporation USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site scripting vulnerability exists in EMC RSA...

SAP Enterprise Portal Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a set of enterprise portal based on NetWeaver system platform developed by SAP, which contains content management, single sign-on, knowledge management, collaborative work, full-text search and other modules. A cross-site scripting vulnerability exists in SAP Enterprise...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the 1 selectedenddate or 2 selectedstartdate parameter to lib/results/tcCreatedPerUserOnTestProject.php; the 3 containerType parameter to...

Plone Cross-Site Scripting Vulnerability

Plone is the U.S. Plone Foundation's set of free and open source content management system CMS built on an application server Zope. The system is developed in Python language , suitable for web portals , internal and external corporate websites , document publishing systems and so on. A cross-sit...

IBM Business Process Manager Cross-Site Scripting Vulnerability

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in IBM...

Stored Cross-Site Scripting Vulnerability in PlayStation Live App

Playcaster Live App is a short video live interactive application. Playcafe Live App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into the page to obtain user cookies and other information...

WK+shop mall system has arbitrary file deletion vulnerability

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop Universal Mall System has an arbitrary file deletion vulnerability, an attacker can delete arbitrary files on disk by...

Cross-Site Scripting Vulnerability in ExtMail Mail System

ExtMail is a mail system launched by Guangzhou Colliers Network Technology Co. A cross-site scripting vulnerability exists in the ExtMail email system. The attacker constructs XSS statements to perform pop-up box operations and obtain user cookies and other information...