Release date:Updated on:
Affected Systems:Wap2 SmallPICT 2.xDescription:--------------------------------------------------------------------------------SmallPICT is a bulletin board software.
The implementation of SmallPICT 2.6 has a cross-site scripting vulnerability, which can be exploited to execute arbitrary HTML and script code in users' browser sessions.
Monitorix HTTP Server "handle_request ()" Cross-Site Scripting Vulnerability
Release date:Updated on:
Affected Systems:Monitorix Description:--------------------------------------------------------------------------------Monitorix is an open-source lightweight system monitoring tool for Linux/UNIX servers and embedded devices.
The "handle_request ()" function
Release date:Updated on:
Affected Systems:Bugzilla 4.xBugzilla 3.xBugzilla 2.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58060CVE (CAN) ID: CVE-2013-0785, CVE-2013-0786Bugzilla is an open-source defect tracking system that manages the entire lifecycle of defects in software development, such as submitting, repairing, and disabling defects.A security vulnerability exists in the implementation of Bugzilla, which can be exploited by malic
SQL injection technology and cross-site scripting attack detection (1) 1. Overview
In the past two years, security experts should pay more attention to attacks at the network application layer. No matter how strong firewall rule settings you have or how often you fix vulnerabilities, if your network application develo
This type of attack was pointed out by security researchers as early as, but it has not been paid much attention in China. Because most of our sites in China are such vulnerable character sets, the impact is still relatively large, and we hope that all major sites can be quickly repaired. See http://applesoup.googlepages.com /.
In a general web program, a character set is specified when the data is displayed to the browser. In China, the character sets we usually use include UTF-8, GBK, and gb23
Cross Site scripting attacks (Scripting), which are not confused with the abbreviations of cascading style sheets (cascading style Sheets, CSS), are abbreviated as XSS for cross-site scripting
I've seen analysts write an article about the security implications of Cross-site scripting, when I just knew there was such a
Problems, and did not read carefully, at present such issues are often published in some security sites, I just saw such an article
,
Hold to know better than do not know the idea of a good, translation collated, the original in the colle
Microsoft anti-Cross-Site Attack Script library v1.5. This download contains the distribution component of Microsoft Application Security Anti-Cross Site Scripting Library. the Anti-Cross Site
Release date:Updated on:
Affected Systems:Apache Group OfBiz 10.4.2Apache Group OfBiz 10.4.1Description:--------------------------------------------------------------------------------Bugtraq id: 57463CVE (CAN) ID: CVE-2013-0177Apache Open For Business (Apache OFBiz) is an Open-source ERP system.Apache versions earlier than 10.04.05 and 11.04.02 have multiple cross-site
Release date:Updated on:
Affected Systems:StatusNet 0.9.8StatusNet 0.8Unaffected system:StatusNet 0.9.9Description:--------------------------------------------------------------------------------Bugtraq id: 49113
StatusNet, formerly Laconica, is an open-source microblog platform software developed using PHP.
StatusNet has a cross-site scripting vulnerability i
Release date:Updated on:
Affected Systems:Hitachi IT Operations DirectorDescription:--------------------------------------------------------------------------------Hitachi IT Operations Director is a system management software that automates client IT infrastructure lifecycle tasks.
Hitachi IT Operations Director 02-50-01 to 02-50-07 and 03-03-03-00-07 have Implementation Vulnerabilities, which can be exploited by malicious users to execute cross-
Release date: 2011-12-16Updated on: 2011-12-19
Affected Systems:PhpMyAdmin 3.4.xUnaffected system:PhpMyAdmin 3.4.8Description:--------------------------------------------------------------------------------Bugtraq id: 51099Cve id: CVE-2011-4634
PhpMyAdmin is written in PHP and can be used to control and operate MySQL databases on the web.
Multiple cross-site scripting
Release date:Updated on:
Affected Systems:Mozilla Bugzilla 4.xMozilla Bugzilla 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56504Cve id: CVE-2012-4189
Bugzilla is an open-source defect tracking system that manages the entire lifecycle of defects in software development, such as submitting, repairing, and disabling defects.
Bugzilla does not properly filter Field Values in the tabular report. Attackers can exploit this vulnerability to
Release date:Updated on:
Affected Systems:Apache Group mod_pagespeed Description:--------------------------------------------------------------------------------Bugtraq id: 55536Cve id: CVE-2012-4001 CVE-2012-4360
Mod_pagespeed is an open-source Apache module that automatically optimizes web pages and resources.
The Apache 'mod _ pagespeed' module has the cross-site
Release date:Updated on:
Affected Systems:PhpLDAPadmin 1.2.2Unaffected system:PhpLDAPadmin 2.0Description:--------------------------------------------------------------------------------Bugtraq id: 51793Cve id: CVE-2012-0834
PhpLDAPadmin is a web-based LDAP client that allows you to conveniently manage LDAP servers.
A cross-site scripting vulnerability exists in
Release date:Updated on:
Affected Systems:Cisco Secure Access Control Server Description:--------------------------------------------------------------------------------Bugtraq id: 65016CVE (CAN) ID: CVE-2014-0668
Cisco Secure Access Control System is an Access policy Control platform.
The portal website of Cisco Secure Access Control System (ACS) 5.4.0.46.3 and earlier versions has the cross-site
Release date:Updated on:
Affected Systems:CouponPHP 1.0Description:--------------------------------------------------------------------------------CouponPHP is a content management system for discount coupons and transaction websites.
CouponPHP CMS 1.0 does not properly filter/admin/ajax/comments_paginate.php or the "sEcho" GET parameter value of/admin/ajax/stores_paginate.php. Multiple cross-site
XSS for Web Security Testing
Cross site scripting (XSS) is the most common vulnerability in Web applications. An attacker embeds a client script (such as JavaScript) in a webpage. When a user browses the webpage, the script is executed in the browser of the user to achieve the target of the attacker. for example, attackers can obtain users' cookies, navigate to m
Security Test-cross-site scripting (xss)
Cross-site scripting (XSS) is an important and common security vulnerability. XSS indicates malicious code input. If the program does not verify the input and output, the browser will be co
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.