Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities

This host is running Andy's PHP Knowledgebase and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbaphpkbmultxssvuln.nasl 5840 2017-04-03 12:02:24Z cfi $ Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright...

PT-2011-4208

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 3.60 Build 4080 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting XSS vulnerabilities. Recommendatio...

Joomla! "searchword" Cross-Site Scripting Vulnerability

No description provided by source. Aung Khant has discovered a vulnerability in Joomla!, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the "searchword" POST parameter to index.php when "option" is set to "comsearch" and "task" is set to...

PG eLms Pro vDEC_2007_01 - 'contact_us.php' Multiple POST Cross-Site Scripting Vulnerabilities

PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities function xss1document.forms"xss".submit; form acti...

Ruby on Rails 'Safe Buffer' XSS Vulnerability (Jun 2011)

Ruby on Rails is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

eFront <= 3.6.9 Build 11018 Multiple Vulnerabilities

eFront is prone to cross-site scripting XSS and local file inclusion LFI vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cybozu Products Images Cross-Site Scripting Vulnerability

This host is running Cybozu Office or Cybozu Garoon and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuproductsxssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Cybozu Products Images Cross-Site Scripting Vulnerability Authors: Sooraj KS Copyright:...

Cybozu Products Mail System Images Cross-Site Scripting Vulnerability

This host is running Cybozu Office, Cybozu Garoon, Cybozu Dezie or Cybozu MailWise and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuproductsmailsystemxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Cybozu Products Mail System Images Cross-Site...

Cachelogic Expired Domains Script Multiple Vulnerabilities

Cachelogic Expired Domains script is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Icinga 'expand' Parameter XSS Vulnerability

Icinga is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga";...

OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability

This host is running OverLook and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoverlookxssvuln.nasl 5668 2017-03-21 14:16:34Z cfi $ OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

PT-2011-3296

Name of the Vulnerable Software and Affected Versions Best Practical Solutions RT versions 2.0.0 through 3.6.10 Best Practical Solutions RT versions 3.8.0 through 3.8.9 Best Practical Solutions RT versions 4.0.0rc through 4.0.0rc7 Description The issue allows remote attackers to inject arbitrary...

CVE-2011-1689: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross-site Scripting (XSS) Vulnerability in (e)2 interactive Photo Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerability in e2 interactive Photo Gallery which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in e2 interactive Photo Gallery The vulnerability exists due to input sanitation error ...

Script Insertion Vulnerabilities in Noah's Classifieds

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Noah's Classifieds which could be exploited to perform script insertion attacks. 1 Script insertion vulnerability in Noah's Classifieds Input passed to the "col18", "description" and "titlePrefix" parameter in index.php i...

Horde Gollem 'file' Cross-Site Scripting Vulnerability

This host is running Horde Gollem and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbhordegollemfilexssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Horde Gollem 'file' Cross-Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

Cross-site Scripting (XSS) Vulnerabilities in webSPELL

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in webSPELL which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in webSPELL 1.1 The vulnerability exists due to input sanitation error in the "pass" and "touser...

Cross-site Scripting (XSS) Vulnerability in Inline Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Inline Gallery WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Inline Gallery The vulnerability exists due to input sanitation error in the " do...

phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities

Summary phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses on separating the presentation, application, and database layers. phpBugTracker is lightweight and easy to install, operate and administer. Most text can b...

Multiple Vulnerabilities in xtcModified

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in xtcModified which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in xtcModified 1.1 The vulnerability exists due to input...