Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

Oracle iPlanet Web Server 7.0.x < 7.0.15 Multiple Vulnerabilities

According to its self-reported version, the Oracle iPlanet Web Server formerly Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to parameter...

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

MS12-040: Vulnerability in Microsoft Dynamics AX Enterprise Portal Could Allow Elevation of Privilege (MSSQL check)

Binary data ms12-040mssql.nbin...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Commentics - index.php Cross-Site Scripting

Commentics - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54111/info Commentics is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

AdaptCMS 2.0.2 - 'index.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info AdaptCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

MediaWiki 1.x - uselang Cross-Site Scripting

MediaWiki 1.x - uselang Cross-Site Scripting source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

MediaWiki 1.x - 'uselang' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

vBSEO - u Cross-Site Scripting

vBSEO - u Cross-Site Scripting source: https://www.securityfocus.com/bid/55908/info vBSEO is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

Juniper Networks Mobility System Software - aaawba_login.html Cross-Site Scripting

Juniper Networks Mobility System Software - aaawbalogin.html Cross-Site Scripting source: https://www.securityfocus.com/bid/54075/info Mobility System Software is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to...

SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities

SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53983/info SPIP is prone to multiple unspecified cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Vanilla Forums 2.0.18.4 Tagging Stored XSS

Exploit for php platform in category web applications Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag...

pragmaMx 1.12.1 - includeswysiwygspaweditorpluginsimgpopupimg_popup.php?img_url Cross-Site Scripting

pragmaMx 1.12.1 - includeswysiwygspaweditorpluginsimgpopupimgpopup.php?imgurl Cross-Site Scripting source: https://www.securityfocus.com/bid/53669/info PragmaMX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

Ruubikcms 1.1.x - Cross-Site Scripting Information Disclosure Directory Traversal

Ruubikcms 1.1.x - Cross-Site Scripting Information Disclosure Directory Traversal source: https://www.securityfocus.com/bid/53655/info RuubikCMS is prone to multiple cross-site-scripting vulnerabilities, multiple information-disclosure vulnerabilities, and directory-traversal vulnerability...

Yandex.Server 2010 9.0 - text Cross-Site Scripting

Yandex.Server 2010 9.0 - text Cross-Site Scripting source: https://www.securityfocus.com/bid/53622/info Yandex.Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code...

PHPhq.Net phAlbum 1.5.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53648/info phAlbum is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Unijimpe Captcha - captchademo.php Cross-Site Scripting

Unijimpe Captcha - captchademo.php Cross-Site Scripting source: https://www.securityfocus.com/bid/53585/info The Unijimpe Captcha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...