cross site scripting scanner

Discover cross site scripting scanner, include the articles, news, trends, analysis and practical advice about cross site scripting scanner on alibabacloud.com

Hitachi IT Operations Director cross-site scripting and DoS Vulnerabilities

Release date:Updated on: Affected Systems:Hitachi IT Operations DirectorDescription:--------------------------------------------------------------------------------Hitachi IT Operations Director is a system management software that automates client IT infrastructure lifecycle tasks. Hitachi IT Operations Director 02-50-01 to 02-50-07 and 03-03-03-00-07 have Implementation Vulnerabilities, which can be exploited by malicious users to execute cross-

Multiple cross-site scripting vulnerabilities in the Horde IMP Webmail Client

Release date:Updated on: Affected Systems:Horde IMP Horde Groupware Webmail Edition Unaffected system:Horde IMP 5.0.21Horde Groupware Webmail Edition 4.0.8Description:--------------------------------------------------------------------------------Bugtraq id: 53435 IMP is an internet messaging program written in PHP. It provides webpage email access and rich Web message transmission for IMAP and POP3 accounts. The Horde IMP Webmail client earlier than IMP 5.0.21 has multiple

Adobe ColdFusion RDS Cross-Site Scripting Vulnerability

Release date: 2011-12-13Updated on: 2011-12-14 Affected Systems:Adobe ColdFusion 9.0.1Adobe ColdFusion 9.0Adobe ColdFusion 8.0.1Adobe ColdFusion 8.0Description:--------------------------------------------------------------------------------Bugtraq id: 51043Cve id: CVE-2011-4368 Adobe ColdFusion is a dynamic Web server. Adobe ColdFusion has a cross-site scripting

Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin versions earlier than 3.4.8

Release date: 2011-12-16Updated on: 2011-12-19 Affected Systems:PhpMyAdmin 3.4.xUnaffected system:PhpMyAdmin 3.4.8Description:--------------------------------------------------------------------------------Bugtraq id: 51099Cve id: CVE-2011-4634 PhpMyAdmin is written in PHP and can be used to control and operate MySQL databases on the web. Multiple cross-site scripting

Adobe Flash Player Cross-Site Scripting Vulnerability

Release date:Updated on: 2011-06-06 Affected Systems:Adobe Flash Player 9.xAdobe Flash Player 10.xUnaffected system:Adobe Flash Player 10.3.181.23Adobe Flash Player 10.3.181.22Description:--------------------------------------------------------------------------------Bugtraq id: 48107Cve id: CVE-2011-2107 Flash Player is a high-performance, lightweight, and expressive client runtime Player. Adobe Flash Player has a cross-

Bugzilla tabular report field value error escape Cross-Site Scripting Vulnerability

Release date:Updated on: Affected Systems:Mozilla Bugzilla 4.xMozilla Bugzilla 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 56504Cve id: CVE-2012-4189 Bugzilla is an open-source defect tracking system that manages the entire lifecycle of defects in software development, such as submitting, repairing, and disabling defects. Bugzilla does not properly filter Field Values in the tabular report. Attackers can exploit this vulnerability to

Apache 'mod _ pagespeed' Module Cross-site scripting and Security Restriction Bypass Vulnerability

Release date:Updated on: Affected Systems:Apache Group mod_pagespeed Description:--------------------------------------------------------------------------------Bugtraq id: 55536Cve id: CVE-2012-4001 CVE-2012-4360 Mod_pagespeed is an open-source Apache module that automatically optimizes web pages and resources. The Apache 'mod _ pagespeed' module has the cross-site

AsaanCart Cross-Site Scripting Vulnerability

% 3C/big % 3E % 3C/u % 3EHttp://www.example.com/asaancart%20v-0.9/libs/smarty_ajax/chat.php/%22onmouseover=prompt (998415) % 3E % 3 CBig % 3E % 3 Cbig % 3E % 3 Cbig % 3E % 3 Cbig % 3E % 3Cu % 3 EHtml % 20 Injection % 20HerE. % 3C/u % 3E % 3C/Big % 3E % 3C/big % 3E % 3C/big % 3E % 3C/big % 3EHttp://www.example.com/asaancart%20v-0.9/libs/smarty_ajax/register.php/%22onmouseover=prompt (970389) % 3E % 3 Cbig % 20 style = % 22 color: % 20rgb (204, % 200, % 200 ); % 22% 3E % 3 Cbig % 3E % 3 Cspanstyl

Multiple Cross-Site Scripting Vulnerabilities in phpMyNewsLetter

Release date: 2012-12-02Updated on: Affected Systems:Kokanosky phpmynewsletter 0.8Description:--------------------------------------------------------------------------------Bugtraq id: 56773 PhpMyNewsLetter is the mail list management script. PhpMyNewsLetter 0.8 and other versions have multiple cross-site scripting vulnerabilities. Attackers can exploit these

IBM Lotus Notes Web application input verification Cross-Site Scripting Vulnerability

Release date:Updated on: Affected Systems:IBM Lotus Notes 8.5.3 Fix Pack 2Description:--------------------------------------------------------------------------------Bugtraq id: 56944CVE (CAN) ID: CVE-2012-4846 IBM Lotus Notes is a desktop client that provides users with single-point access, helping them create, query, and share knowledge, collaborate with teams, and take appropriate actions. The cross-site

World of Phaos SQL injection and Cross-Site Scripting

World of Phaos SQL injection and Cross-Site Scripting Release date:Updated on: Affected Systems:WorldofphaosDescription:--------------------------------------------------------------------------------Bugtraq id: 56347 World of phaos is a browser-based RPG Game written in PHP. World of Phaos 0.9.82-UPDATED-5 and other versions have security vulnerabilities tha

Adobe Flash Player and AIR cross-site scripting (CVE-2014-0531)

Adobe Flash Player and AIR cross-site scripting (CVE-2014-0531) Release date:Updated on: Affected Systems:Adobe Flash Player 13.xAdobe AIR 13.xDescription:--------------------------------------------------------------------------------Bugtraq id: 67962CVE (CAN) ID: CVE-2014-0531Adobe Flash Player is an integrated multimedia Player. Adobe AIR is a technology devel

CensorNet Professional v4 'lookup _ url' Parameter Cross-Site Scripting Vulnerability

CensorNet Professional v4 'lookup _ url' Parameter Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:Censornet CensorNet Professional v4 2.1.7Censornet CensorNet ProfessionalDescription:--------------------------------------------------------------------------------Bugtraq id: 58865CensorNet Professional is an Internet filtering softw

PhpBB Chart Module Cross-site scripting and SQL Injection

Affected Systems:PhpBB Group Chart Mod 1.1Description:--------------------------------------------------------------------------------Bugtraq id: 17952 PhpBB is a Web-based Open Source Forum program implemented in PHP, which is widely used. It supports multiple databases as the backend, such as Oracle, MSSQL, MySql, and ipvs. Multiple cross-site scripting and S

Simple Cross Site Scripting (XSS) Servlet Filter

Our Java website has encountered some problems today and requires a quick solution to protect the website against malicious cross-site scripting (XSS) attempts. I'm not saying this is a perfect solution, but it is easy to implement and correct vulnerabilities, forms and URL injection. We can basically intercept every request sent to the Web application through th

Php Content Management System e107 multiple cross-site scripting and SQL Injection Vulnerabilities

Affected Versions:E107 website system 0.7.16 vulnerability description: E107 is a content management system written in php. The following modules of e107 do not fully filter user submitted variables: -Submitnews. php-Usersettings. php.-E107_admin/newpost. php.-E107_admin/banlist. php.-E107_admin/banner. php.-E107_admin/cpage. php-E107_admin/download. php.-E107_admin/users_extended.php.-E107_admin/frontpage. php.-E107_admin/links. php.-E107_admin/mailout. php. Remote attackers can execute

HP System Management Homepage servercert Parameter Cross-Site Scripting Vulnerability

Affected Versions: HP System Management Homepage 3.0HP System Management Homepage 2.1Vulnerability description: HP System Management home page (SMH) is a Web-based interface that integrates and simplifies Windows, Lunux, and HP-UX Operating Systems A single system management process for HP servers. Hp smh does not properly filter the servercert parameter in the URI request. If a user is cheated and follows a malicious link, cross-

PhpLDAPadmin "base" Parameter Cross-Site Scripting Vulnerability

Release date:Updated on: Affected Systems:PhpLDAPadmin 1.2.2Unaffected system:PhpLDAPadmin 2.0Description:--------------------------------------------------------------------------------Bugtraq id: 51793Cve id: CVE-2012-0834 PhpLDAPadmin is a web-based LDAP client that allows you to conveniently manage LDAP servers. A cross-site scripting vulnerability exists in

Cisco Secure ACS Portal Cross-Site Scripting (CVE-2014-0668)

Release date:Updated on: Affected Systems:Cisco Secure Access Control Server Description:--------------------------------------------------------------------------------Bugtraq id: 65016CVE (CAN) ID: CVE-2014-0668 Cisco Secure Access Control System is an Access policy Control platform. The portal website of Cisco Secure Access Control System (ACS) 5.4.0.46.3 and earlier versions has the cross-site

Cells Blog SQL injection and Cross-Site Scripting

Release date:Updated on: Affected Systems:Cells Blog 3.3Description:--------------------------------------------------------------------------------Bugtraq id: 65094 Cells Blog 3.3 and other versions do not effectively filter users. php, errmsg. multiple SQL injection and cross-site scripting vulnerabilities exist in the implementation of php parameter values,

Total Pages: 15 1 .... 11 12 13 14 15 Go to: Go

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.