what is cross site scripting xss

Release date: 2012-12-02Updated on: Affected Systems:Kokanosky phpmynewsletter 0.8Description:--------------------------------------------------------------------------------Bugtraq id: 56773 PhpMyNewsLetter is the mail list management script. PhpMyNewsLetter 0.8 and other versions have multiple cross-site scripting

Release date:Updated on: Affected Systems:IBM Lotus Notes 8.5.3 Fix Pack 2Description:--------------------------------------------------------------------------------Bugtraq id: 56944CVE (CAN) ID: CVE-2012-4846 IBM Lotus Notes is a desktop client that provides users with single-point access, helping them create, query, and share knowledge, collaborate with teams, and take appropriate actions. The cross-

World of Phaos SQL injection and Cross-Site Scripting Release date:Updated on: Affected Systems:WorldofphaosDescription:--------------------------------------------------------------------------------Bugtraq id: 56347 World of phaos is a browser-based RPG Game written in PHP. World of Phaos 0.9.82-UPDATED-5 and oth

CensorNet Professional v4 'lookup _ url' Parameter Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:Censornet CensorNet Professional v4 2.1.7Censornet CensorNet ProfessionalDescription:--------------------------------------------------------------------------------Bugtraq id: 58865CensorNet Professional

Release date:Updated on: Affected Systems:PhpLDAPadmin 1.2.2Unaffected system:PhpLDAPadmin 2.0Description:--------------------------------------------------------------------------------Bugtraq id: 51793Cve id: CVE-2012-0834 PhpLDAPadmin is a web-based LDAP client that allows you to conveniently manage LDAP servers. A cross-site

Release date:Updated on: Affected Systems:Cisco Secure Access Control Server Description:--------------------------------------------------------------------------------Bugtraq id: 65016CVE (CAN) ID: CVE-2014-0668 Cisco Secure Access Control System is an Access policy Control platform. The portal website of Cisco Secure Access Control System (ACS) 5.4.0.46.3 and earlier versions has the cross-

Release date:Updated on: Affected Systems:CouponPHP 1.0Description:--------------------------------------------------------------------------------CouponPHP is a content management system for discount coupons and transaction websites. CouponPHP CMS 1.0 does not properly filter/admin/ajax/comments_paginate.php or the "sEcho" GET parameter value of/admin/ajax/stores_paginate.php. Multiple cross-

Release date:Updated on: Affected Systems:Mathias-ketaskcheck_mk 1.2.2p2Description:--------------------------------------------------------------------------------Bugtraq id: 66391CVE (CAN) ID: CVE-2014-2329Check_MK is a common Nagios/Icinga data collection plug-in.Check_MK 1.2.2p2 and other versions have multiple HTML Injection Vulnerabilities and Cross-Site

Release date:Updated on: Affected Systems:Htbridge AContent 1.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2012-5167, CVE-2012-5169 AContent is an e-learning content creation tool and library that supports the import, export, and production of IMS content packages. Multiple vulnerabilities in AContent 1.2 and earlier versions can be exploited by malicious users to execute

Release date:Updated on: Affected Systems:SpagoBI 4.0Description:--------------------------------------------------------------------------------Bugtraq id: 65911CVE (CAN) ID: CVE-2013-6232 SpagoBI is an open-source business intelligence software package. SpagoBI 4.0 and other versions are returned to users without verifying certain input. in implementation, there are persistent cross-

Affected Versions:WordPress 3.0.1 vulnerability description:Bugtraq id: 42440 WordPress is a free forum Blog system. If the action parameter is set to delete-selected, WordPress does not properly filter and submit it to wp-admin/plugins. php's checked [0] parameter is returned to the user, which allows remote attackers to execute a reflection-type

Affected Versions:Ikiwiki 2.53.5Ikiwiki 2.53.4Ikiwiki 2.31.1Ikiwiki 2.31Ikiwiki 3.20100312Ikiwiki 3.1415926Ikiwiki 3.141592Ikiwiki 2.48Ikiwiki 2.47Ikiwiki 1.34Debian Linux 5.0Debian Linux 5.0 s/390Debian Linux 5.0 powerpcDebian Linux 5.0 mipselDebian Linux 5.0 mipsDebian Linux 5.0 m68kDebian Linux 5.0 IA-64Debian Linux 5.0 ia-32Debian Linux 5.0 hppaDebian Linux 5.0 armelDebian Linux 5.0 armDebian Linux 5.0 amd64Debian Linux 5.0 alphaDebian Linux 5.0. Vulnerability description: Ikiwiki

Release date: 2012-03-16Updated on: 2012-03-19 Affected Systems:VMWare VMware View 4.6VMWare VMware View 4.0Unaffected system:VMWare VMware View 4.6.1Description:--------------------------------------------------------------------------------Bugtraq id: 52526CVE (CAN) ID: CVE-2012-1511 VMware View is an industry-leading desktop virtualization solution. VMware View has multiple security vulnerabilities, which can be exploited by malicious local user

Adobe Flash Player and AIR cross-site scripting (CVE-2014-0532) Release date:Updated on: Affected Systems:Adobe Flash Player 13.xAdobe AIR 13.xDescription:--------------------------------------------------------------------------------Bugtraq id: 67973CVE (CAN) ID: CVE-2014-0532Adobe Flash Player is an integrated multi

Release date:Updated on: Affected Systems:LongTail VideoDescription:--------------------------------------------------------------------------------LongTail Video is a leading company in the online Video market in New York. Its flagship product is JW Video player. The coding of the JWPlayerFLASH video player has security issues. Remote attackers can exploit this vulnerability to execute

Release date:Updated on: Affected Systems:Bugzilla 4.xBugzilla 3.xBugzilla 2.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58060CVE (CAN) ID: CVE-2013-0785, CVE-2013-0786Bugzilla is an open-source defect tracking system that manages the entire lifecycle of defects in software development, such as submitting, repairing, and disabling defects.A security vulnerability exists in the implementation