ButorWiki 3.0 - service Cross-Site Scripting

ButorWiki 3.0 - service Cross-Site Scripting source: https://www.securityfocus.com/bid/52059/info ButorWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

11in1 Cross Site Request Forgery and Local File Include Vulnerabilities

11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and open or run...

Tube Ace - q Cross-Site Scripting

Tube Ace - q Cross-Site Scripting source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

cforms II vulnerable to cross-site scripting

Overview cforms II contains a cross-site scripting vulnerability. cforms II provided by delicious days is a plugin for WordPress. cforms II contains a cross-site scripting vulnerability. Kousuke Ebihara and Yuya Watanabe of Tejimaya.inc reported this vulnerability to IPA. JPCERT/CC coordinated wi...

11in1 CMS 1.2.1 - index.php?class Traversal Local File Inclusion

11in1 CMS 1.2.1 - index.php?class Traversal Local File Inclusion source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)

11in1 CMS 1.2.1 - Cross-Site Request Forgery Admin Password source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

11in1 CMS 1.2.1 - '/admin/index.php?class' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/52025/info 11in1 is prone to a cross-site request-forgery and a local file include vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

Microsoft SharePoint 'inplview.aspx' Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

PT-2012-2058

Name of the Vulnerable Software and Affected Versions TYPO3 Additional TCA Forms jftcaforms extension versions prior to 0.2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 0.2.1, update ...

PT-2012-3068

Name of the Vulnerable Software and Affected Versions Euro Calculator skt eurocalc extension version 0.0.1 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified...

PT-2012-3074

Name of the Vulnerable Software and Affected Versions TYPO3 UrlTool aeurltool extension version 0.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For UrlTool aeurltool extension version 0.1.0, update to a version tha...

PT-2012-3075

Name of the Vulnerable Software and Affected Versions bc post2facebook extension versions prior to 0.2.2 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 0.2.2,...

PT-2012-3064

Name of the Vulnerable Software and Affected Versions TYPO3 extension 'Documents download rtg files' versions prior to 1.5.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.5.2, update to version...

CVE-2012-1049

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the 1 domainName parameter to jsp/AddDC.jsp or 2 operation parameter to DomainConfig.do...

Zimbra - view Cross-Site Scripting

Zimbra - view Cross-Site Scripting source: https://www.securityfocus.com/bid/51974/info Zimbra is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_qry_alert.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - baseqryalert.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_graph_form.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basegraphform.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - index.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - index.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorize...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_db_setup.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basedbsetup.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...