Stored Cross-Site Scripting Vulnerability in PlayStation Live App

Playcaster Live App is a short video live interactive application. Playcafe Live App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into the page to obtain user cookies and other information...

WK+shop mall system has arbitrary file deletion vulnerability

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop Universal Mall System has an arbitrary file deletion vulnerability, an attacker can delete arbitrary files on disk by...

IBM Business Process Manager Cross-Site Scripting Vulnerability

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in IBM...

Plone Cross-Site Scripting Vulnerability

Plone is the U.S. Plone Foundation's set of free and open source content management system CMS built on an application server Zope. The system is developed in Python language , suitable for web portals , internal and external corporate websites , document publishing systems and so on. A cross-sit...

Cross-Site Scripting Vulnerability in ExtMail Mail System

ExtMail is a mail system launched by Guangzhou Colliers Network Technology Co. A cross-site scripting vulnerability exists in the ExtMail email system. The attacker constructs XSS statements to perform pop-up box operations and obtain user cookies and other information...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2017-34246)

Cisco Unified Intelligence Center is the management center for the unified communications system of the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center due to the program failing to properly filter user-supplied input. An attacker may...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-34852)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability in oEmbed Discovery. A remote attacker can exploit this...

Variable Override Vulnerability in SchoolCMS

SchoolCMS is a school teaching management system based on PHP+MySQL. SchoolCMS suffers from a variable override vulnerability. An attacker can utilize the browser's TAB function to override access to user information...

The vulnerability of the REST plugin of the Apache Struts software framework, which allows a hacker to execute arbitrary code.

The vulnerability of the REST plugin for the Apache Struts software platform exists due to the lack of filtering during deserialization of XML payloads. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2017-32686)

Adobe ColdFusion is a dynamic Web server product that runs CFML which is a programming language for Web applications. A cross-site scripting vulnerability exists in Adobe ColdFusion, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be...

CVE-2017-1440

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-23792)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site...

CVE-2016-3113

CVE-2016-3113 is a cross-site scripting vulnerability in the ovirt-engine web UI. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected: ovirt-engine (web UI) component; root cause relates to input handling enabling script/HTML injection. Impact stated by NVD:...

SOL.Connect ISET-mpp meter SQL Injection Vulnerability

The Popendorf Software Engineering SOL.Connect ISET-mpp meter is a photovoltaic plant data acquisition meter from Popendorf Software Engineering, Germany. A SQL injection vulnerability exists in the SOL.Connect ISET-mpp meter. This vulnerability can be exploited by remote attackers to execute...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-21250)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

PaulShop Stored Cross-Site Scripting Vulnerability

PaulShop is a shopping cart web system. PaulShop firstname, lastname, address, city, state, zipcode, phone, fax, deliveryaddress, deliverycity, deliverystate, deliveryzipcode Parameter-stored cross-site scripting vulnerability. An attacker can insert malicious js code into a page to obtain user...

Schneider Electric Pelco Sarix/Spectra Cameras Cross-Site Request Forgery Vulnerability

Pelco Sarix/Spectra Cameras is a video camera. A cross-site request forgery vulnerability exists in the Schneider Electric Pelco Sarix/Spectra Cameras. An attacker can exploit the vulnerability user to perform certain actions if a logged in user visits a malicious web site with this privilege...

Arbitrary Code Execution Vulnerability in S-CMS class.asp

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS class.asp has an arbitrary code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Reflective Cross-site Scripting Vulnerability in Empire Web Management System

Empire Website Management System is a content management system based on php+mysql. A cross-site scripting vulnerability exists in the Empire Website Management System due to the system failing to perform strict filtering of strings. An attacker can exploit this vulnerability to perform cross-sit...

e107 v2 Bootstrap CMS - CSRF Web Vulnerability

Document Title: =============== e107 v2 Bootstrap CMS - CSRF Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2083 Release Date: ============= 2017-07-05 Vulnerability Laboratory ID VL-ID: ==================================== 2083 Commo...