CVE Vulnerability

CWE-79

CVE-2019-9591

by

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.

CVE-2019-9592

by

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVE-2019-9593

by

A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

CVE-2019-9595

by

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter.

CVE-2019-9605

by

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.

CVE-2019-9606

by

PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the “Update profile” feature.