Cross-Site Scripting Vulnerability in ExtMail Mail System

ExtMail is a mail system launched by Guangzhou Colliers Network Technology Co. A cross-site scripting vulnerability exists in the ExtMail email system. The attacker constructs XSS statements to perform pop-up box operations and obtain user cookies and other information...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2017-34246)

Cisco Unified Intelligence Center is the management center for the unified communications system of the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center due to the program failing to properly filter user-supplied input. An attacker may...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-34852)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability in oEmbed Discovery. A remote attacker can exploit this...

Variable Override Vulnerability in SchoolCMS

SchoolCMS is a school teaching management system based on PHP+MySQL. SchoolCMS suffers from a variable override vulnerability. An attacker can utilize the browser's TAB function to override access to user information...

The vulnerability of the REST plugin of the Apache Struts software framework, which allows a hacker to execute arbitrary code.

The vulnerability of the REST plugin for the Apache Struts software platform exists due to the lack of filtering during deserialization of XML payloads. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2017-32686)

Adobe ColdFusion is a dynamic Web server product that runs CFML which is a programming language for Web applications. A cross-site scripting vulnerability exists in Adobe ColdFusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

CVE-2017-1440

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-23792)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...

CVE-2016-3113

CVE-2016-3113 is a cross-site scripting vulnerability in the ovirt-engine web UI. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected: ovirt-engine (web UI) component; root cause relates to input handling enabling script/HTML injection. Impact stated by NVD:...

SOL.Connect ISET-mpp meter SQL Injection Vulnerability

The Popendorf Software Engineering SOL.Connect ISET-mpp meter is a photovoltaic plant data acquisition meter from Popendorf Software Engineering, Germany. A SQL injection vulnerability exists in the SOL.Connect ISET-mpp meter. This vulnerability can be exploited by remote attackers to execute...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-21250)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

PaulShop Stored Cross-Site Scripting Vulnerability

PaulShop is a shopping cart web system. PaulShop firstname, lastname, address, city, state, zipcode, phone, fax, deliveryaddress, deliverycity, deliverystate, deliveryzipcode Parameter-stored cross-site scripting vulnerability. An attacker can insert malicious js code into a page to obtain user...

Schneider Electric Pelco Sarix/Spectra Cameras Cross-Site Request Forgery Vulnerability

Pelco Sarix/Spectra Cameras is a video camera. A cross-site request forgery vulnerability exists in the Schneider Electric Pelco Sarix/Spectra Cameras. An attacker can exploit the vulnerability user to perform certain actions if a logged in user visits a malicious web site with this privilege...

Arbitrary Code Execution Vulnerability in S-CMS class.asp

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS class.asp has an arbitrary code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Reflective Cross-site Scripting Vulnerability in Empire Web Management System

Empire Website Management System is a content management system based on php+mysql. A cross-site scripting vulnerability exists in the Empire Website Management System due to the system failing to perform strict filtering of strings. An attacker can exploit this vulnerability to perform cross-sit...

e107 v2 Bootstrap CMS - CSRF Web Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...

UBUNTU-CVE-2017-7459

ntopng before 3.0 allows HTTP Response Splitting...

File Upload Vulnerability in FinecmsV5.0.8

FineCMS is a content management system based on PHP+MySql. A file upload vulnerability exists in Finecms V5.0.8, which exists in the file finecms\dayrui\controllers\Api.php. An attacker can exploit the vulnerability to upload arbitrary files...

SAP BusinessObjects Financial Consolidation Cross-Site Scripting Vulnerability (CNVD-2017-14353)

The SAP BusinessObjects portfolio offers a wide range of business intelligence software, information management software, enterprise performance management solutions, and regulatory, risk, and compliance solutions. financial Consolidation is an enterprise performance management product. A...

Catfish CMS is vulnerable to XSS

Catfish Catfish CMS is an open source PHP CMS web content management system. catfish cms there is an XSS vulnerability, the reason for this vulnerability is not filtered user-submitted data due to the attacker can exploit the vulnerability to implant cross-site code to obtain sensitive informatio...