CVE Vulnerability

CWE-79

CVE-2019-7427

by

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone “/netflow/jspui/linkdownalertConfig.jsp” file in the autorefTime or graphTypes parameter.

CVE-2019-7430

by

PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.

CVE-2019-7432

by

PHP Scripts Mall Rental Bike Script 2.0.3 has HTML injection via the STREET field in the Profile Edit section.

CVE-2019-7435

by

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected HTML injection via the Search Form.

CVE-2019-7437

by

PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting (XSS) via the Search field.

CVE-2019-7438

by

cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter.