8703 matches found
TextPattern 4.2 - index.php Cross-Site Scripting
TextPattern 4.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47182/info TextPattern is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...
python-feedparser 5.0 - feedparserfeedparser.py Cross-Site Scripting
python-feedparser 5.0 - feedparserfeedparser.py Cross-Site Scripting source: https://www.securityfocus.com/bid/47177/info python-feedparser is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
Eleanor CMS - Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47164/info Eleanor CMS is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script co...
TP-Link TL-PS110U TL-PS110P - Cross-Site Scripting
TP-Link TL-PS110U TL-PS110P - Cross-Site Scripting GotGeek Labs http://www.gotgeek.com.br/ TP-Link TL-PS110U & TL-PS110P Cross-site Scripting Vulnerability + Description TL-PS110U: The TP-LINK TL-PS110U print server allows you to take the computer out of the loop while setting up a printing...
WordPress Plugin Placester 0.1 - 'ajax_action' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47142/info The Placester WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...
Collabtive Multiple Remote Input Validation Vulnerabilities
Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit these issues to obtain sensitive information, execute arbitrary script code, and steal cookie-based authentication...
Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities
Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/47105/info Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit...
Collabtive 0.6.5 - Multiple Remote Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47105/info Collabtive is prone to multiple remote input-validation vulnerabilities including cross-site scripting, HTML-injection, and directory-traversal issues. Attackers can exploit these issues to obtain sensitive information, execute arbitrary script...
InTerra Blog Machine 1.84 - 'subject' HTML Injection
source: https://www.securityfocus.com/bid/47104/info InTerra Blog Machine is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...
Spitfire 1.0.3x - cms_username Cross-Site Scripting
Spitfire 1.0.3x - cmsusername Cross-Site Scripting source: https://www.securityfocus.com/bid/47077/info Spitfire is prone to a cross-site scripting vulnerability. because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...
Tracks 1.7.2 - URI Cross-Site Scripting
Tracks 1.7.2 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/47078/info Tracks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions
osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An...
Tracks 1.7.2 - URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/47078/info Tracks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
CVE-2011-0439
Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...
Alkacon OpenCMS 7.5.x - Multiple Cross-Site Scripting Vulnerabilities
Alkacon OpenCMS 7.5.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47055/info Alkacon OpenCms is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage the...
pppBLOG 0.3 - 'search.php' Cross-Site Scripting Vulnerability
pppBLOG 0.3 'search.php' Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/47068/info pppBLOG is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...
webEdition CMS HTML Injection and Local File Include Vulnerabilities
webEdition CMS is prone to multiple HTML-injection vulnerabilities and a local file-include vulnerability. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication...
PT-2011-2342
Name of the Vulnerable Software and Affected Versions Mahara versions 1.2.x through 1.2.6 Mahara versions 1.3.x through 1.3.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box. This could potentially lead to...
e107 vulnerable to cross-site scripting
Overview e107 contains a cross-site scripting vulnerability. e107 provided by e107.org is a Content Management System CMS software. e107 contains a cross-site scripting vulnerability. Daiki Fukumori reported this vulnerability to IPA. JPCERT/CC coordinated with the vendor under Information Securi...
phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities
This host is running phpBugTracker and is prone to multiple reflected cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpbugtrackermultiplexss.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities Authors: Antu...