CVE-2018-9123

In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile...

QQQ SYSTEMS cross-site scripting vulnerability (CNVD-2018-07698)

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A cross-site scripting vulnerability exists in QQQ SYSTEMS version 2.24. A remote attacker can exploit this vulnerability to inject arbitrary web scripts via the quiz.cgi file...

PHP 2chBBS Cross-Site Scripting Vulnerability

PHP 2chBBS is a set of PHP and MySQL based announcement web scripts. A cross-site scripting vulnerability exists in PHP 2chBBS bbs18c version. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2018-06272)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

IBM Connections Cross-Site Scripting Vulnerability (CNVD-2018-06270)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site scripting...

ecolformas.com XSS vulnerability

Open Bug Bounty ID: OBB-585415 Description| Value ---|--- Affected Website:| ecolformas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-8732

Cross-site scripting XSS vulnerability in WampServer 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the virtualdel parameter...

Arbitrary File Deletion Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...

CVE-2017-9783

CVE-2017-9783 affects ProjectSend (formerly cFTP), a PHP/MySQL-based self-hosted app. A Cross-site Scripting (XSS) vulnerability exists in the Description field during a Site name update, allowing remote attackers to inject arbitrary web script or HTML. The issue is tied to commits before 6c37104...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...

EasySNS V1.6 Frontend Arbitrary File Download Vulnerability

ESPHP development framework based on the development of EasySNS minimalist community for the new database architecture and program structure.ESPHP is a self-developed set of PHP source code framework. EasySNS V1.6 in the program implementation of arbitrary file download vulnerability, attackers c...

AxxonSoft Axxon Next Directory Traversal Vulnerability

Axxon Next is a new generation of open platform video management software. AxxonSoft Axxon Next suffers from a directory traversal vulnerability that can be exploited by an attacker to perform directory traversal via a string in a URL...

Bugzilla 'report.cgi' Cross-Site Request Forgery Vulnerability

Bugzilla is a Web-based bug tracking system used by a large number of software projects. A cross-site request forgery vulnerability exists in 'report.cgi' in Bugzilla. An attacker could exploit this vulnerability to obtain confidential information...

CVE-2018-7205

Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages - Edit template properties - Device Layouts - Create devic...

Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router Remote Command Execution Vulnerability

The Cisco RV132W ADSL2+ Wireless-N VPN Routers and the RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. A remote command execution vulnerability exists in the Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. The vulnerability stems from the program's...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

linuxapps12.herokuapp.com XSS vulnerability

Open Bug Bounty ID: OBB-550469 Description| Value ---|--- Affected Website:| linuxapps12.herokuapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Stored Cross-site Scripting Vulnerability in QYKCMS Frontend lib_post.php Page

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. A stored cross-site scripting vulnerability exists in the QYKCMS frontend libpost.php page. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading...

Vulners Web Vulnerability Scanner plugin for Google Chrome v. 2.0

Vulners Team released today the second version of their Web Vulnerability Scanning plugin for Google Chrome browser. You can read my description of the version 1.0 at "Vulners.com vulnerability detection plugins for Burp Suite and Google Chrome". Killing feature of Vulners web scanner v. 2.0 is...