PHPMyVisites 2.4 - PHPmv2index.php Multiple Cross-Site Scripting Vulnerabilities

PHPMyVisites 2.4 - PHPmv2index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52377/info phpMyVisites is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to...

Etano 1.20/1.22 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52295/info Etano is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

starCMS - q URI Cross-Site Scripting

starCMS - q URI Cross-Site Scripting source: https://www.securityfocus.com/bid/52262/info starCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Dotclear 2.4.1.2 - adminplugin.php?page Cross-Site Scripting

Dotclear 2.4.1.2 - adminplugin.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/52221/info Dotclear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Dotclear 2.4.1.2 - admincomments.php Multiple Cross-Site Scripting Vulnerabilities

Dotclear 2.4.1.2 - admincomments.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52221/info Dotclear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

Fork CMS 3.x - '/backend/modules/error/actions/index.php?parse()' Multiple Error Display Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52236/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

Bontq - 'user/' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/52183/info Bontq is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

D-Link DCS - 'security.cgi' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service...

D-Link DCS - security.cgi Cross-Site Request Forgery

D-Link DCS - security.cgi Cross-Site Request Forgery source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device,...

ContentLion Alpha 1.3 - login.php Cross-Site Scripting

ContentLion Alpha 1.3 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/52112/info ContentLion Alpha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Oxwall 1.1.1 - plugin Cross-Site Scripting

Oxwall 1.1.1 - plugin Cross-Site Scripting source: https://www.securityfocus.com/bid/52125/info Oxwall is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

ContentLion Alpha 1.3 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52112/info ContentLion Alpha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Oxwall 1.1.1 - 'plugin' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52125/info Oxwall is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting

Dolphin 7.0.x - explanation.php?explain Cross-Site Scripting source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities

Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Xavi 7968 ADSL Router - '/webconfig/wan/confirm.html/confirm?pvcName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially...

Xavi 7968 ADSL Router - webconfigwanconfirm.htmlconfirm?pvcName Cross-Site Scripting

Xavi 7968 ADSL Router - webconfigwanconfirm.htmlconfirm?pvcName Cross-Site Scripting source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to...

Xavi 7968 ADSL Router - Multiple Cross-Site Request Forgery Vulnerabilities

Xavi 7968 ADSL Router - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute...

ButorWiki 3.0 - service Cross-Site Scripting

ButorWiki 3.0 - service Cross-Site Scripting source: https://www.securityfocus.com/bid/52059/info ButorWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

JaWiki - versionNo Cross-Site Scripting

JaWiki - versionNo Cross-Site Scripting source: https://www.securityfocus.com/bid/52060/info JaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...