Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the user_include parameter.


Persistent Cross-Site Scripting (XSS) vulnerability in Alexander Stokmann's Code Snippets Extended plugin <= 1.4.7 on WordPress via Cross-Site Request Forgery (vulnerable parameters &title &snippet_code).

cross site scripting
cross site request forgery


Cross-site scripting (XSS) vulnerability in inc/lib/lib.base.php in SASHA 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the instructors parameter. NOTE: the original disclosure also mentions the section_title parameter but this was disputed by the vendor and retracted by the original researcher.


The Privileges portion of the web GUI and the XMLRPC API in Apache VCL 2.3.x before 2.3.2 2.2.x before 2.2.2 and 2.1 allow remote authenticated users with nodeAdmin manageGroup resourceGrant or userGrant permissions to gain privileges cause a denial of service or conduct cross-site scripting (XSS) attacks by leveraging improper data validation.


Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for (1) a GIF filename which triggers display of the GIF file in text format and an unspecified denial of service (crash); or (2) the login.tri filename which triggers a continuous loop of the browser attempting to visit the login page.


Adobe Acrobat Reader Plugin before 8.0.0 and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4 8.x before 8.1.7 and 9.x before 9.2 when used with Internet Explorer Google Chrome or Opera allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL related to a \cross-site scripting issue.\


wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file as demonstrated by the (1) collapsing-archives/options.txt (2) akismet/readme.txt (3) related-ways-to-take-action/options.php (4) wp-security-scan/securityscan.php and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.


mailpost.exe in MailPost 5.1.1sv and possibly earlier versions allows remote attackers to cause a denial of service (server crash) leak sensitive pathname information in the resulting error message and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file which leaks the pathname and does not quote the script in the resulting Visual Basic error message.


Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager before 3.0.1. The vulnerabilities could potentially be exploited to allow stored cross-site scripting which could allow a hacker to create a denial of service.


QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's account


ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.


The

Moped::BSON::ObjecId.legal?

method

in

rubygem-moped

before

commit

allows

remote

attackers

to

cause

a

denial

of

service

(worker

resource

consumption)

or

perform

a

cross-site

scripting

(XSS)

attack

via

a

crafted

string.


Trac before 0.9.6 does not disable the \raw\ or \include\ commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils which allows remote attackers to read arbitrary files perform cross-site scripting (XSS) attacks or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.


The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags as demonstrated using \<<>AAA<><>\ possibly due to nested or empty tags.


Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures which allows remote attackers to bypass request filtering and conduct cross-site scripting (XSS) attacks or cause a denial of service as demonstrated via an xss:expression STYLE attribute in a closing XSS HTML tag.


ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input a related issue to CVE-2015-0899.


WebKit as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6 does not properly handle node parentage which allows remote attackers to cause a denial of service (DOM tree corruption) conduct cross-site scripting (XSS) attacks or possibly have unspecified other impact via unknown vectors.


Cross-site scripting (XSS) vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID as demonstrated by resultant cross-site request forgery (CSRF) attacks that change passwords or cause a denial of service aka Bug ID CSCtq46488.

cross site scripting
denial of service
cross site request forgery


Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a .. (dot dot) in (1) the loc parameter to admincp/index.php and (2) the Hyperlink information URl field for post Topic in showthread.php enabling cross-site scripting (XSS) and other attacks a different vulnerability than CVE-2005-3025.2.

cross site scripting
directory traversal


The UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8 sequences as required by the standard which allows remote attackers to conduct cross-site scripting (XSS) and directory traversal attacks via long sequences that decode to dangerous metacharacters.


Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0 when register_globals is enabled allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or \..\ sequences in the (1) dir_abs_src parameter in (a) check_entry.php (b) admin_album.php (c) admin_image.php and (d) admin_util.php; and the (2) dir_abs_admin_src parameter in admin_album.php and admin_image.php. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) attacks.


Cross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Also this issue might be resultant from directory traversal.


Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php. NOTE: item 1a might be resultant from directory traversal.


Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter. NOTE: this issue might be resultant from directory traversal.


index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename which allows remote attackers to conduct directory traversal attacks and produces resultant cross-site scripting (XSS) and path disclosure.


Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. (dot dot) in the avatar parameter and cause other users to execute this script by using sendData.php to send a message to (1) an individual user or (2) a room leading to cross-site request forgery (CSRF) cross-site scripting (XSS) or other impacts.

cross site scripting
directory traversal
cross site request forgery


Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id (2) f (3) quote and (4) act parameters to cp.php; the (5) u parameter to user.php; the (6) f parameter to post.php; the (7) s parameter to topic.php; the (8) quote (9) t (10) poll and (11) p parameters to post.php; the (12) Message Title field of a private message (PM) in mode 6 of cp.php; the (13) title field of a private message (PM) in mode 7 of cp.php; and (14) allow user-assisted remote attackers to inject arbitrary web script or HTML via a dosearch action to search.php which reflects the first lines of all posts by a user. NOTE: the act parameter to help.php and the p parameter to report.php are already covered by CVE-2006-4708. NOTE: vectors 12 and 13 might overlap CVE-2006-6283.1. NOTE: vector 14 might overlap CVE-2006-4708.b.


Multiple cross-site scripting (XSS) vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) tipo or (2) destino parameter to login_registrese.php3 in the Services section (3) the rubro parameter to precios.php3 in the Products section (4) the arti parameter to recomenda_articulo.php3 in the Products section (5) the descrip parameter in a profile action to control/abm_det.php3 in the e-Commerce section (6) the tit parameter in a delivery_courier action to control/abm_list.php3 in the e-Commerce section or (7) the tit parameter in an usuario action to control/abm_det.php3 in the e-Commerce section.


Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFactures 1.0 and possibly 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prefixe_dossier parameter in (a) /inc/header.php; (2) msg parameter in (b) /remises/ajouter_remise.php (c) /tva/ajouter_tva.php (d) /stocks/ajouter.php (e) /pays/ajouter_pays.php (f) /produits/ajouter_cat.php (g) /produits/ajouter_produit.php and (h) /produits/modifier_cat.php; (3) tire parameter in /remises/ajouter_remise.php; (4) quantite (5) taux and (6) date parameter in /stocks/ajouter.php; and (7) pays and (8) prefixe parameter in /pays/ajouter_pays.php.


Multiple

cross-site

scripting

(XSS)

vulnerabilities

in

WWWthreads

and

earlier

allow

remote

attackers

to

inject

arbitrary

web

script

or

HTML

via

the

Cat

parameter

to

dosearch.php

postlist.php

showmembers.php

online.php

login.php

newuser.php

wwwthreads.php

search.php

or

postlist.php.


Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate.


Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6) when anti-spoofing is enabled allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh.


Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) reply.asp or (b) view_print.asp the (2) SH1 parameter to (c) search.asp the (3) name parameter to reply.asp or the (4) dosearch parameter to (d) advsearch.asp.


Multiple cross-site scripting (XSS) vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the (1) Searchpage parameter to dosearch.php (2) Number (3) what or (4) page parameter to newreply.php (5) Number (6) Board or (7) what parameter to showprofile.php (8) fpart or (9) page parameter to showflat.php or (10) like parameter to showmembers.php.


Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher it is unclear whether this issue is distinct from the msg DoS.


Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2 2.0RC2 and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to todos/tag/. NOTE: some of these details are obtained from third party information.


Cross-site scripting (XSS) vulnerability in Microsoft Exchange Outlook Web Access (OWA) allows remote attackers to inject arbitrary web script or HTML via a crafted email or chat client aka \Microsoft Exchange Server Elevation of Privilege Vulnerability.\

cross site scripting
elevated privilege vulnerability


Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request aka \Microsoft IIS Server XSS Elevation of Privilege Vulnerability.\


Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2 Microsoft Excel Web Apps 2010 SP2 Microsoft Office Web Apps 2010 SP2 Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request aka \Microsoft Office XSS Elevation of Privilege Vulnerability.\


Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests aka \Microsoft Exchange Cross-Site Scripting Vulnerability.\


Microsoft Exchange Server 2010 SP3 Exchange Server 2013 SP3 Exchange Server 2013 CU16 and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests aka \Microsoft Exchange Cross-Site Scripting Vulnerability\. This CVE ID is unique from CVE-2017-8559.


Microsoft Exchange Server 2010 SP3 Exchange Server 2013 SP3 Exchange Server 2013 CU16 and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests aka \Microsoft Exchange Cross-Site Scripting Vulnerability\. This CVE ID is unique from CVE-2017-8560.


Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter aka \ADFS XSS Elevation of Privilege Vulnerability.\


Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and BizTalk Server 2010 2013 Gold and 2013 R2 allows remote attackers to inject arbitrary web script or HTML via the search parameter aka \UDDI Services Elevation of Privilege Vulnerability.\


Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL aka \Skype for Business Server and Lync Server XSS Elevation of Privilege Vulnerability.\


Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request aka \Microsoft Exchange Elevation of Privilege Vulnerability.\


PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability within the article creation page which can result in escalation of privileges.

cross site scripting
escalated privilege


Cross-site scripting for some Intel(R) Server Boards Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.


IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response once the URL is clicked. This would allow the attacker to perform further attacks such as Web cache poisoning or cross-site scripting and possibly obtain sensitive information. IBM X-Force ID: 162236.

cross site scripting
improper user input validation


IBM Cognos Analytics 11.1.7 11.2.0 and 11.1.7 is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 209691.


A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by persuading a user to retrieve a crafted file that contains malicious payload and upload it to the affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated remote attacker to conduct a cross-site scripting attack. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by convincing a user to click a link designed to pass malicious input to the interface. A successful exploit could allow the attacker to conduct cross-site scripting attacks and gain access to sensitive browser-based information.


IBM InfoSphere Guardium 7.0 8.0 8.01 and 8.2 is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 78294.


The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response splitting attacks caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response once the URL is clicked. This would allow the attacker to perform further attacks such as Web cache poisoning or cross-site scripting and possibly obtain sensitive information. IBM X-force ID: 140692.


Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


A vulnerability in an API of Cisco Webex Meetings could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user-supplied input to an application programmatic interface (API) within Cisco Webex Meetings. An attacker could exploit this vulnerability by convincing a targeted user to follow a link designed to submit malicious input to the API used by Cisco Webex Meetings. A successful exploit could allow the attacker to conduct cross-site scripting attacks and potentially gain access to sensitive browser-based information from the system of a targeted user.


The HCL Connections 5.5 help system is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564.


IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Campaign is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Connections is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


IBM Infosphere BigInsights is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.


Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.

cross site scripting
information disclosure


Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.


Adobe Acrobat and Reader versions 2019.012.20040 and earlier 2017.011.30148 and earlier 2017.011.30148 and earlier 2015.006.30503 and earlier and 2015.006.30503 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to information disclosure.


There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to insufficient validation of user input a local authenticated attacker could exploit this vulnerability by injecting special characters. Successful exploit could cause certain information disclosure. Affected product versions include: WS318n-21 10.0.2.2 10.0.2.5 and 10.0.2.6.


An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.


VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure.


Adobe ColdFusion Update 5 and earlier versions ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure.


Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting which could allow a local authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user which could possibly cause website redirection session hijacking or information disclosure. This vulnerability has been patched in BuySpeed version 15.3.


Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product Affecting versions 7.0.x 7.2 and 7.2.1 . The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.


Versiant LYNX Customer Service Portal (CSP) version 3.5.2 is vulnerable to stored cross-site scripting which could allow a local authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects session cookie hijacking or information disclosure.


Magento versions 1.14.4.5 and earlier and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


TinyShop a free and open source mall based on RageFrame2 has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely resulting in cross-site scripting (XSS) or information disclosure.


Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product Affecting versions 2.6.1 2.7.x 2.8.x 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure.


Adobe Experience Manager Forms versions 6.2 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.5 6.4 6.3 6.2 6.1 and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.4 6.3 6.2 6.1 and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.4 6.3 6.2 6.1 and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.4 6.3 6.2 6.1 and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Magento versions 2.3.3 and earlier 2.2.10 and earlier 1.14.4.3 and earlier and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Magento versions 2.3.4 and earlier 2.2.11 and earlier (see note) 1.14.4.4 and earlier and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.


Magento versions 2.3.4 and earlier 2.2.11 and earlier (see note) 1.14.4.4 and earlier and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .


The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors aka \Microsoft Edge Information Disclosure Vulnerability.\ This vulnerability is different from those described in CVE-2017-0009 CVE-2017-0011 CVE-2017-0065 and CVE-2017-0068.


Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016 Lync 2010 and 2013 SP1 Lync 2010 Attendee and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session aka \Server Input Validation Information Disclosure Vulnerability.\


Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL aka \Skype for Business Server and Lync Server XSS Information Disclosure Vulnerability.\


The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors aka \Microsoft Browser Information Disclosure Vulnerability.\


Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8 Office SharePoint Server 2007 SP2 Office SharePoint Server 2010 Gold and SP1 Groove Server 2010 Gold and SP1 Windows SharePoint Services 3.0 SP2 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings aka \toStaticHTML Information Disclosure Vulnerability\ or \HTML Sanitization Vulnerability.\


Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

cross site scripting
information disclosure
escalated privilege


A vulnerability in the web framework code of Cisco IOS and Cisco IOS XE Software could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software using the banner parameter. The vulnerability is due to insufficient input validation of the banner parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by crafting a banner parameter and saving it. The attacker could then convince a user of the web interface to access a malicious link or could intercept a user request for the affected web interface and inject malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information.

cross site scripting
insufficient input validation


A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by convincing a user of the web interface to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information.


A vulnerability in Cisco Unified Contact Center Express (UCCX) Software could allow an unauthenticated remote attacker to conduct an HTTP response splitting attack. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request on an affected device. A successful exploit could allow the attacker to perform cross-site scripting attacks web cache poisoning access sensitive browser-based information and similar exploits.


The

Google

Maps

Easy

WordPress

plugin

is

vulnerable

to

Stored

Cross-Site

Scripting

due

to

insufficient

input

validation

and

sanitization

via

several

parameters

found

in

the

file

which

allowed

attackers

with

administrative

user

access

to

inject

arbitrary

web

scripts

in

versions

up

to

and

including

This

affects

multi-site

installations

where

is

disabled

for

administrators

and

sites

where

is

disabled.


The MyBB Cross-Poster WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/classes/MyBBXPSettings.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.0. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via several parameters that are echo'd out via the ~/templates/settings.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 2.0.1. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Job Board Vanila WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the psjb_exp_in and the psjb_curr_in parameters found in the ~/job-settings.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.0. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 4.16.5. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The

WpGenius

Job

Listing

WordPress

plugin

is

vulnerable

to

Stored

Cross-Site

Scripting

due

to

insufficient

input

validation

and

sanitization

via

several

parameters

found

in

the

file

which

allowed

attackers

with

administrative

user

access

to

inject

arbitrary

web

scripts

in

versions

up

to

and

including

This

affects

multi-site

installations

where

is

disabled

for

administrators

and

sites

where

is

disabled.


The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.0.7. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews function found in the ~/OMAPI/Output.php file which allows attackers to inject arbitrary web scripts in versions up to and including 2.6.0.


The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.30.2. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The

Indeed

Job

Importer

WordPress

plugin

is

vulnerable

to

Stored

Cross-Site

Scripting

due

to

insufficient

input

validation

and

sanitization

via

several

parameters

found

in

the

file

which

allowed

attackers

with

administrative

user

access

to

inject

arbitrary

web

scripts

in

versions

up

to

and

including

This

affects

multi-site

installations

where

is

disabled

for

administrators

and

sites

where

is

disabled.


The job-portal WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/jobs_function.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 0.0.1. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The

Author

Bio

Box

WordPress

plugin

is

vulnerable

to

Stored

Cross-Site

Scripting

due

to

insufficient

input

validation

and

sanitization

via

several

parameters

found

in

the

file

which

allowed

attackers

with

administrative

user

access

to

inject

arbitrary

web

scripts

in

versions

up

to

and

including

This

affects

multi-site

installations

where

is

disabled

for

administrators

and

sites

where

is

disabled.


The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/wp-hal.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 2.1.1. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The

KJM

Admin

Notices

WordPress

plugin

is

vulnerable

to

Stored

Cross-Site

Scripting

due

to

insufficient

input

validation

and

sanitization

via

several

parameters

found

in

the

file

which

allowed

attackers

with

administrative

user

access

to

inject

arbitrary

web

scripts

in

versions

up

to

and

including

This

affects

multi-site

installations

where

is

disabled

for

administrators

and

sites

where

is

disabled.


The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/classes/Utils/Settings.php file which made it possible for attackers with administrative user access to inject arbitrary web scripts in versions up to and including 7.2.4. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Job Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin-jobs.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 0.7.25. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Business Manager WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization found throughout the plugin which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.4.5. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W RV130 RV130W and RV215W Routers could allow an authenticated remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit these vulnerabilities an attacker would need to have valid administrator credentials on the affected device.


A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data in a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the ~/trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 1.3.24. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the $site_id parameter found in the ~/fathom-analytics.php file which allowed attackers with administrative user access to inject arbitrary web scripts in versions up to and including 3.0.4. This affects multi-site installations where unfiltered_html is disabled for administrators and sites where unfiltered_html is disabled.


The Join Meeting page of Mitel MiCollab Web Client before 9.2 FP2 could allow an attacker to access (view and modify) user data by executing arbitrary code due to insufficient input validation aka Cross-Site Scripting (XSS).


NetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS (Cross-Site Scripting) vulnerability in ReportCenter UI due to insufficient input validation that could potentially allow an attacker to execute code on the affected machine.


A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve96608.


A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by convincing a user of the web interface to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvb09516.


A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting and injecting code into a user request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco Small Business 300 Series Managed Switches Cisco Small Business 500 Series Stackable Managed Switches Cisco 350 Series Managed Switches Cisco 350X Series Stackable Managed Switches Cisco 550X Series Stackable Managed Switches Cisco ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvg24637.


A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf51241 CSCvf51261.


A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78615 CSCvf78628.


A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web UI of the affected software. An attacker could exploit this vulnerability by injecting XSS content into the web UI of the affected software. A successful exploit could allow the attacker to force a user to execute code of the attacker's choosing or allow the attacker to retrieve sensitive information from the user. Cisco Bug IDs: CSCvf70587 CSCvf70592.


A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by persuading a user to click a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76835.


A vulnerability in Cisco WebEx Meetings Server could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf85562.


A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf78635 CSCvg52440.


A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Known Affected Releases 10.5(2). Cisco Bug IDs: CSCvf25345.


The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the WebLaunch function of the affected software. An attacker could exploit this vulnerability by convincing a user to access a malicious link or by intercepting a user request and injecting malicious code into the request. Cisco Bug IDs: CSCvf12055. Known Affected Releases: 98.89(40).


A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCuw65830.


A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvg89116.


Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain parameters that are passed to the affected software via the web UI. An attacker could exploit these vulnerabilities by persuading a user of the affected UI to access a malicious link or by intercepting a user request for the affected UI and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected UI or allow the attacker to access sensitive browser-based information on the user's system. Cisco Bug IDs: CSCuz38591 CSCvb09530 CSCvb10022.


A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting certain malicious code. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve25985.


A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvi63757.


A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvi71274.


A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to the web-based management interface. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvf72309.


A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvi07812.


A vulnerability in the web framework of Cisco Identity Services Engine (ISE) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvg86743.


A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of certain parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting certain malicious code. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvj00512.


A vulnerability in the web framework of Cisco Webex could allow an unauthenticated remote attacker to conduct a Document Object Model-based (DOM-based) cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software by using the HTTP POST method. An attacker who can submit malicious scripts to the affected user interface element could execute arbitrary script or HTML code in the user's browser in the context of the affected site. Cisco Bug IDs: CSCvj33287.


A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are passed to the affected software via the HTTP GET and HTTP POST methods. An attacker who can convince a user to follow an attacker-supplied link could execute arbitrary script or HTML code in the user's browser in the context of an affected site. Cisco Bug IDs: CSCvf76417.


A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to the web-based management interface of an affected device. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Unity Connection Software could allow an authenticated remote attacker to perform a stored cross-site scripting (XSS) attack. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by providing crafted data to a specific field within the interface. A successful exploit could allow the attacker to store an XSS attack within the interface. This stored XSS attack would then be executed on the system of any user viewing the attacker-supplied data element.


A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by interacting with the interface in a way that injects malicious content in a log file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated remote attacker with administrative credentials to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. To exploit this vulnerability the attacker would need administrative credentials on the affected device.


A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by inserting malicious data in a specific data field in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web-based management interface or access sensitive browser-based information.


A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated remote attacker to perform a stored cross-site scripting (XSS) attack on an affected device. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by providing malicious data to a specific field within the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. Cisco ISE Software releases 2.7.0 and later contains the fix for this vulnerability.


Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.


Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.


Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.


Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.


Insufficient input validation in the gridExcelExport functionality in CA PPM 14.3 and below 14.4 15.1 15.2 CP5 and below and 15.3 CP2 and below allows remote attackers to execute reflected cross-site scripting attacks.


The UMA product with software V200R001 and V300R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.


The UMA product with software V200R001 has a cross-site scripting (XSS) vulnerability due to insufficient input validation. An attacker could craft malicious links or scripts to launch XSS attacks.


A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated remote attacker to perform a cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface access sensitive browser-based information or cause an affected device to reboot under certain conditions.

cross site scripting
insufficient input validation
arbitrary code execution


A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated remote attacker to perform a Document Object Model (DOM)-based cross-site scripting attack. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could exploit this vulnerability by convincing the user to access a malicious link or by intercepting the user request and injecting the malicious code. An exploit could allow the attacker to execute arbitrary code in the context of the affected site or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCve76848 CSCve76856.


Integer overflow in the xml_utf8_decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting (XSS) and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding a different vulnerability than CVE-2010-3870.


phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by modifying this code.


Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.


The \Save for Web\ selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.


Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting aka \Man-in-the-Middle\ XSS.


Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X Windows XP Windows Vista and iPhone before 1.0.1 allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.


Insufficient output sanitization in WallacePOS 1.4.3 allows a remote authenticated attacker to conduct persistent cross-site scripting (XSS) attacks via a crafted sales transaction.


FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.

cross site scripting
buffer overread
dos


FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.


FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.


FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.


FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.


FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file related to a call from the readttfcopyrights function in parsettf.c.


FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.


vim is vulnerable to Heap-based Buffer Overflow


libmysofa is vulnerable to Heap-based Buffer Overflow


IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.


mruby is vulnerable to Heap-based Buffer Overflow


ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.


ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.


FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.

cross site scripting
buffer overflow
dos


FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.


phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.


pimcore is vulnerable to Cross-Site Request Forgery (CSRF)


yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)


showdoc is vulnerable to Cross-Site Request Forgery (CSRF)


livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)


kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)


archivy is vulnerable to Cross-Site Request Forgery (CSRF)


twill is vulnerable to Cross-Site Request Forgery (CSRF)


bookstack is vulnerable to Cross-Site Request Forgery (CSRF)


Piwigo

is

vulnerable

to

Cross-Site

Request

Forgery

via

/admin.php?page=configuration&section=main

or

/admin.php?page=batch_manager&mode=unit.

An

attacker

can

exploit

this

to

coerce

an

admin

user

into

performing

unintended

actions.


e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing meta-changing and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker.


PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.


PyroCMS

is

vulnerable

to

cross-site

request

forgery

(CSRF)

via

the

URI:

an

arbitrary

plugin

will

be

deleted.


rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form (add a user delete a user or edit a user).


Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code which results in a non-invertible integer that eventually leads to a segfault due to an out of bounds read.


jshamcrest is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in to the emailAddress validator.

cross site scripting
denial of service
dos


jadedown is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.


Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir filename type nid an attacker can inject \../\ to escape and write file to writeable directories.


nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature.


wffserve is vulnerable to a directory traversal issue giving an attacker access to the filesystem by placing \../\ in the url.


pooledwebsocket is vulnerable to a directory traversal issue giving an attacker access to the filesystem by placing \../\ in the url.


gaoxuyan is vulnerable to a directory traversal issue giving an attacker access to the filesystem by placing \../\ in the url.


Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS.


protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.


sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.


bookstack is vulnerable to Improper Access Control

cross site scripting
improper access control


kimai2 is vulnerable to Improper Access Control


peertube is vulnerable to Improper Access Control


Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.


RosarioSIS 6.7.2 is vulnerable to XSS caused by improper validation of user-supplied input by the Preferences.php script. A remote attacker could exploit this vulnerability using the tab parameter in a crafted URL.


RosarioSIS 6.7.2 is vulnerable to XSS caused by improper validation of user-supplied input by the Search.inc.php script. A remote attacker could exploit this vulnerability using the advanced parameter in a crafted URL.


RosarioSIS 6.7.2 is vulnerable to XSS caused by improper validation of user-supplied input by the PrintSchedules.php script. A remote attacker could exploit this vulnerability using the include_inactive parameter in a crafted URL.


Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure


mruby is vulnerable to NULL Pointer Dereference

cross site scripting
null pointer dereference


KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by uploading a web shell as a product category image.

cross site scripting
remote code execution


PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without \< > ? = ` ....\ In WriteConfig() function an attacker can inject php code to /include/config.cache.php file.


ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.


AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php


jpress

is

vulnerable

to

remote

code

execution

via

io.jpress.web.admin._TemplateController#doInstall.

The

admin

panel

provides

a

function

through

which

attackers

can

install

templates

and

inject

some

malicious

code.


Leanote

is

vulnerable

to

Cross

Site

Scripting

(XSS)

in

the

markdown

type

note.

This

leads

to

remote

code

execution

with

payload

<video

src=x

onerror=(function(){require('child_process').exec('calc');})();>


CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.

cross site scripting
remote code execution
directory traversal


jpress

is

vulnerable

to

remote

code

execution

via

io.jpress.module.page.PageNotifyKit#doSendEmail.

The

admin

panel

provides

a

function

through

which

attackers

can

edit

the

email

templates

and

inject

some

malicious

code.

cross site scripting
remote code execution
dos


jpress

is

vulnerable

to

remote

code

execution

via

io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail.

The

admin

panel

provides

a

function

through

which

attackers

can

edit

the

email

templates

and

inject

some

malicious

code.


A

cross-site

request

forgery

vulnerability

exists

in

Jenkins

Warnings

Plugin

and

earlier

in

that

allows

attackers

to

execute

arbitrary

code

via

a

form

validation

HTTP

endpoint.

arbitrary code execution
cross site request forgery


A Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.


A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.


A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.


A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execute arbitrary commands if they coerce or trick a local user to visit a compromised website with malicious scripts.

arbitrary command execution
cross site request forgery


A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.


A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.


A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles.


A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2 and Magento Commerce prior to 1.14.4.2 Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2.


A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.


A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation.


A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule.


A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.


A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

Netsparker

Cloud

Scan

Plugin

and

older

in

the

NCScanBuilder.DescriptorImpl#doValidateAPI

form

validation

method

allowed

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.


A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method capturing credentials stored in Jenkins.


A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.


A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.


A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins Kmap Plugin in KmapJenkinsBuilder.DescriptorImpl form validation methods allows attackers to initiate a connection to an attacker-specified server.


A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

Nomad

Plugin

in

the

NomadCloud.DescriptorImpl#doTestConnection

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

Chef

Sinatra

Plugin

in

the

ChefBuilderConfiguration.DescriptorImpl#doTestConnection

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A cross-site request forgery vulnerability in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers to initiate a connection to an attacker-specified server.


A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

Audit

to

Database

Plugin

in

the

DbAuditPublisherDescriptorImpl#doTestJdbcConnection

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A

cross-site

request

forgery

vulnerability

exists

in

Jenkins

Git

Plugin

and

earlier

in

that

allows

attackers

to

create

a

Git

tag

in

a

workspace

and

attach

corresponding

metadata

to

a

build

record.


A

cross-site

request

forgery

vulnerability

in

Jenkins

VMware

Lab

Manager

Slaves

Plugin

in

the

LabManager.DescriptorImpl#doTestConnection

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

SOASTA

CloudTest

Plugin

in

the

CloudTestServer.DescriptorImpl#doValidate

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

OpenShift

Deployer

Plugin

in

the

DeployApplication.DeployApplicationDescriptor#doCheckLogin

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

FTP

publisher

Plugin

in

the

FTPPublisher.DescriptorImpl#doLoginCheck

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A

cross-site

request

forgery

vulnerability

in

Jenkins

openid

Plugin

in

the

OpenIdSsoSecurityRealm.DescriptorImpl#doValidate

form

validation

method

allows

attackers

to

initiate

a

connection

to

an

attacker-specified

server.


A cross-site request forgery vulnerability in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers to have Jenkins evaluate a computationally expensive regular expression.


A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provision new agents.


A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.


A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins RapidDeploy Plugin 4.1 and earlier allows attackers to connect to an attacker-specified web server.


A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.


A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.


Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.


Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.


Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors aka Bug ID CSCue35910.


Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco WebEx Social allow remote attackers to hijack the authentication of arbitrary users via unspecified vectors aka Bug IDs CSCuh10405 and CSCuh10355.


The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.


A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker.


A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim


A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.


A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses.


Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages.


A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.


A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains.


A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL capturing credentials stored in Jenkins.


A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.


A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations.


A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.


A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests.


A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.


A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters.


A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.


A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job.


A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.


Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete actions as administrators via (1) the block_id parameter to add_block.php or (2) the link_id parameter to add_link.php.


The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER which allows remote attackers to conduct CSRF attacks.


Multiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme.


Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users aka Bug ID CSCun24250.


Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Documentum WDK before 6.7SP1 P28 and 6.7SP2 before P15 allow remote attackers to hijack the authentication of arbitrary users.


Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Fortinet FortiWeb before 5.2.0 allow remote attackers to hijack the authentication of administrators via system/config/adminadd and other unspecified vectors.


Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request to admin/system_shutdown.html.


Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hijack the authentication of arbitrary users aka ZEN-12653.


Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.


A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.


A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.


A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.


A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to change the owners and item-specific permissions of a job.


A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response.


A cross-site request forgery (CSRF) vulnerability in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins autonomiq Plugin 1.15 and earlier allows attackers to connect to an attacker-specified URL server using attacker-specified credentials.


A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.


A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.


A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.


A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an attacker-specified URL.


A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.


A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.


A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.


A Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary users or achieve account takeover via the app/service.php URI.


A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.


A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.


A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.