CVE-2014-6163

Cross-site scripting XSS vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6163

The CVE-2014-6163 issue affects IBM WebSphere DataPower XC10 appliances (versions 2.1 and 2.5) before FP4. It is an XSS vulnerability that allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. The vulnerability impact is described as a client-side script inje...

CVE-2013-6163

ProjeQtOr (Project'Or RIA) before 4.0.0 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary HTML/script via parameters: type (view/parameter.php), p1value (view/main.php), and objectClass (view/objectDetail.php). Root cause: unsanitized input reflected into pages...

Project'Or RIA 3.4.0 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-018 - Original release date: July 26th, 2013 - Last revised: July 26th, 2013 - Discovered by: Vicente Aguilera Diaz - Severity: 4.3/10 CVSSv2 Base Scored - CVE-ID: CVE-2013-6163...

CVE-2008-6163

OpenX (v2.6.1) OpenX ac.php bannerid Parameter SQL Injection: the bannerid input is used directly in SQL queries without validation, enabling remote attackers to manipulate queries and potentially access sensitive data or execute arbitrary PHP code. Affected component: www/delivery/ac.php. Root c...

FreeBSD Ports: openx

The remote host is missing an update to the system as announced in the referenced advisory. VID 55616fda-a2d0-11dd-a9f9-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 55616fda-a2d0-11dd-a9f9-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Sql injection

SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6163

CVE-2007-6163: Concrete details across connected sources show a SQL injection vulnerability in admin/index2.asp of GOUAE DWD Realty. The pword (Password) parameter is exploitable to execute arbitrary SQL commands, enabling remote attackers to interact with the database. Related entries also note ...

CVE-2006-6163

Cross-site scripting XSS vulnerability in tiki-setupbase.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters...

CVE-2006-6163

Affected software: TikiWiki. Vulnerable component: tiki-setup_base.php. Root cause: Cross-site scripting (XSS) in tiki-setup_base.php allowing remote injection of arbitrary JavaScript via unspecified parameters in TikiWiki versions before 1.9.7. Impact: cross-site scripting exposure if exploited....