Unfixed XSS vulnerability at www.gamereactor.no

Security researcher SnigelSniper, has submitted on 17/09/2007 a cross-site-scripting XSS vulnerability affecting www.gamereactor.no, which at the time of submission ranked 149074 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.e-avize.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.e-avize.com, which at the time of submission ranked 1025454 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.nealayim.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.nealayim.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2007. It is currently...

Unfixed XSS vulnerability at www.tacsatis.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.tacsatis.com, which at the time of submission ranked 880890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.merlinhelpsstudents.com

Security researcher TheFlash, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.merlinhelpsstudents.com, which at the time of submission ranked 428805 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. ...

Unfixed XSS vulnerability at www.mavicanet.com

Security researcher Saime, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.mavicanet.com, which at the time of submission ranked 33533 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...

Unfixed XSS vulnerability at portal.hemenal.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting portal.hemenal.com, which at the time of submission ranked 181474 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.sporservis.com

Security researcher BackDoor, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.sporservis.com, which at the time of submission ranked 518545 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.pagina.se

Security researcher By Encore, has submitted on 16/09/2007 a cross-site-scripting XSS vulnerability affecting www.pagina.se, which at the time of submission ranked 856005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is current...

Unfixed XSS vulnerability at www.poyrazilkogretim.k12.tr

Security researcher BackDoor, has submitted on 15/09/2007 a cross-site-scripting XSS vulnerability affecting www.poyrazilkogretim.k12.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

Unfixed XSS vulnerability at www.onlinemagazam.com

Security researcher BackDoor, has submitted on 15/09/2007 a cross-site-scripting XSS vulnerability affecting www.onlinemagazam.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is...

SOL7923 - Cross-site scripting vulnerability in the logon page after enabling a pre-logon sequence - CVE-2007-6704

A cross-site scripting XSS vulnerability—CVE-2007-6704—exists in the FirePass logon page when a pre-logon sequence is enabled. The affected FirePass URL fails to fully sanitize URL input before the web page content is sent to the browser. It is possible for an attacker to create web pages,...

Unfixed XSS vulnerability at www.eryamankoopbirioo.k12.tr

Security researcher BackDoor, has submitted on 15/09/2007 a cross-site-scripting XSS vulnerability affecting www.eryamankoopbirioo.k12.tr, which at the time of submission ranked 3541703 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007...

CVE-2007-4893

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

CVE-2007-4895

Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 Semarang 3 allows remote attackers to read arbitrary files via the f parameter...

CVE-2007-4893

wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a does not properly verify the unfilteredhtml privilege, which allows remote attackers to conduct cross-site scripting XSS attacks via modified data to 1 post.php or 2 page.php with a nofilter field...

DEBIAN-CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

CVE-2007-4896

Multiple cross-site scripting XSS vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 langadminseite, 2 langueberschrift, or 3 einstmetachar parameter, different vectors than CVE-2007-4711...

CVE-2007-4899

Boinc Forum 5.10.20 and earlier contains multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via (1) id in forum_forum.php or (2) search_string in forum_text_search_action.php for both titles and bodies searches. Affected product: Boinc Forum versions up to 5.10.20. The sou...

CVE-2007-4901

Affected software: AOL Instant Messenger (AIM) family on Windows (AIM 6.1.41.2, 6.2.32.1; AIM Pro; AIM Lite). Component/causal issue: embedded Internet Explorer server control (mshtml.dll) used to render HTML in instant messages, with insufficient input sanitization of inbound HTML content. Impac...