EUVD-2021-10020

Malware in sbrugna...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2021-23380)

Revive Adserver is an open source ad server under the GNU General Public License license with an integrated banner management interface and a tracking system for collecting statistical information. A reflected cross-site scripting vulnerability exists in the status parameter in...

CVE-2021-22888

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the status parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScri...

ZoneMinder cross-site scripting vulnerability (CNVD-2019-04691)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras and more. ZoneMinder1.32.3 and previous versions of the web/skins/classic/views/zones.php file there is a cross-site scripting vulnerability , an attacker can send a specially crafted...

osCommerce 2.2 admin/zones.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1270

Multiple cross-site scripting XSS vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Description field. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1270

Multiple cross-site scripting (XSS) vulnerabilities affect zones.php in Inprotect 0.21, enabling remote attackers to inject arbitrary web script or HTML via the Name or Description fields. The underlying issue is an input handling flaw in zones.php, leading to client-side script execution if unes...