Inductive Automation Ignition Cross-Site Scripting Vulnerability

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Ignition has a security vulnerability that can be exploited by an attacker to execute malicious content in a vulnerable web application. The server reads data directly from the HTTP request and th...

Multiple HTML Injection Vulnerabilities in Barracuda Networks SSL VPN 480

Barracuda Networks SSL VPN 480 is an all-in-one hardware and software SSL VPN solution from Barracuda Networks. The solution provides secure remote access to internal network resources without the need to install a client browser. An HTML injection vulnerability exists in Barracuda Networks SSL V...

Drupal Profile2 Privacy Module Cross-Site Scripting Vulnerability

Drupal is a developmental CMF Content Management Framework written in the PHP language. A cross-site scripting vulnerability exists in the Drupal Profile2 Privacy module. Because the program fails to properly filter user-supplied text, an attacker can exploit the vulnerability to execute arbitrar...

Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability

Document Title: =============== Ebay Inc Xcom 7 - Policy Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1228 Release Date: ============= 2015-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1228...

PHPMoAdmin 'moadmin.php' Remote Code Execution Vulnerability

phpMoAdmin is a PHP development in the MongoDB management tools , can be used to create , delete and modify databases and indexes , provide views and data search tools , provide database startup time and memory statistics , support JSON. A remote code execution vulnerability exists in PHPMoAdmin...

Maroyaka CGI Maroyaka Image Album Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Image Album is a CGI script for placing image files into websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Image Album. A remote attacker could use this vulnerability to inject arbitrary web script or HTML...

Maroyaka CGI Maroyaka Simple Board Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Simple Board is a CGI script for publishing text to websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Simple Board. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Multiple HTML Injection Vulnerabilities in MyBB

MyBB is a popular forum program. MyBB suffers from multiple HTML injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can execute the provided HTML and script code in the context of the affected site...

Zen Cart Cross-Site Scripting Vulnerability

Zen Cart is a PHP-based WEB application. Zen Cart suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Data Source: Scopus CMS - SQL Injection Web Vulnerability

Document Title: =============== Data Source: Scopus CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1436 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID VL-ID: ====================================...

Data Source: Scopus CMS - SQL Injection Web Vulnerability

Document Title: =============== Data Source: Scopus CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1436 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID VL-ID: ====================================...

Drupal Avatar Uploader Arbitrary File Upload Vulnerability

Drupal is an open source content management platform. An arbitrary file upload vulnerability exists in Drupal Avatar Uploader, which allows attackers to exploit the vulnerability to upload arbitrary files and execute scripts and code...

Cosmoshop 'index.cgi' Cross-Site Scripting Vulnerability

Cosmoshop is an online store application. A cross-site scripting vulnerability exists in Cosmoshop 'index.cgi', which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain sensitive cookies, hijack sessions,...

jui_filter_rules 'jui_filter_rules.php' Arbitrary PHP Code Execution Vulnerability

juifilterrules is a filter rules application. juifilterrules 'juifilterrules.php' fails to properly filter user input, allowing remote attackers to exploit the vulnerability by submitting a request, injecting PHP code, and executing it in the WEB...

u5CMS Cross-Site Scripting Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. A cross-site scripting vulnerability exists in u5CMS. Th...

CVE-2015-0031

CVE-2015-0031 affects Microsoft Internet Explorer 6–11 via a crafted web page that triggers memory corruption and remote code execution. The vulnerability is part of the IE memory‑corruption family and is addressed by MS15-009 (security update for Internet Explorer). Per the Nessus plugin, IE 9–1...

CVE-2015-0049

CVE-2015-0049 affects Microsoft Internet Explorer 8 and 10 with memory corruption allowing remote code execution via a crafted webpage. The connected Nessus/KB data confirms multiple IE memory‑corruption vulnerabilities, and MS15‑009 (KB 3034682) is the bundled security update addressing IE, with...

CVE-2015-0046

CVE-2015-0046 targets Microsoft Internet Explorer 9–11. The associated Nessus plugin confirms an IE memory corruption vulnerability that can enable remote code execution via a crafted web page. The practical remediation is applying security updates: MS15-009 (Security Update 3034682). Full protec...

MantisBT 'adm_config_report.php' cross-site scripting vulnerability (CNVD-2015-01092)

MantisBT is a popular web-based bug tracking system written in PHP. A cross-site scripting vulnerability exists in MantisBT 'admconfigreport.php' due to the program failing to adequately filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or...

UBUNTU-CVE-2015-1564

Cross-site scripting XSS vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field...