8665 matches found
FlexWATCH Network Camera - Cross-Site Scripting
FlexWATCH Network Camera - Cross-Site Scripting source: https://www.securityfocus.com/bid/18936/info FlexWATCH Network Camera is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...
CVE-2006-2759: Undefined Security Weakness
jetty 6.0.x jetty6 beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations...
Enigma Haber 4.2 - Cross-Site Scripting
Enigma Haber 4.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18226/info Enigma Haber is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
ToendaCMS 0.7 - index.php Cross-Site Scripting
ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities
EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...
Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting
Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18118/info Chipmunk Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
CVE-2006-2556: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal TRanx rebuilded, allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
JVN#46691257 RWiki arbitrary Ruby script execution vulnerability
Impact A remote attacker could execute an arbitrary Ruby script on the server where RWiki is installed, with the privilege running RWiki. Solution Products Affected RWiki/2.1.0pre2 and all earlier versions...
ASPBB 0.5.2 - 'profile.asp?get' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...
obotix IP Camera M1 1.9.4 .7M10 2.0.5.2 - events.tar?source_ip Cross-Site Scripting
obotix IP Camera M1 1.9.4 .7M10 2.0.5.2 - events.tar?sourceip Cross-Site Scripting source: https://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-suppli...
GLSA-200605-09 : Mozilla Thunderbird: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200605-09 Mozilla Thunderbird: Multiple vulnerabilities Several vulnerabilities were found and fixed in Mozilla Thunderbird. Impact : A remote attacker could craft malicious emails that would leverage these issues to inject and...
OZJournals 1.2 - 'Vname' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17954/info OZJournals is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...
liberoXSS.txt
--Security Report-- Advisory: libero.it XSS vulnerability - HTML injection --- Author: Davide Denicolo --- Date: 28/04/06 --- Contact: davidesecurityinfos.com --- Vendor: ItaliaOnLine S.r.l http://www.libero.it Service: Web Level: Low --- Description: Libero.it is a Web portal of big Italian ISP:...
CuteNews 1.4.1 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17850/info CuteNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...
CVE-2006-2176
Multiple cross-site scripting XSS vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 newinput, 2 newurl, or 3 newname parameter...
GLSA-200604-18 : Mozilla Suite: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200604-18 Mozilla Suite: Multiple vulnerabilities Several vulnerabilities were found in Mozilla Suite. Version 1.7.13 was released to fix them. Impact : A remote attacker could craft malicious web pages or emails that would levera...
ZenPhoto 0.91.0 - index.php Multiple Cross-Site Scripting Vulnerabilities
ZenPhoto 0.91.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17779/info Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...
Albinator 2.0.8 - 'dlisting.php?cid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...
CVE-2006-2124
Multiple cross-site scripting XSS vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 prevaction, 2 previd, 3 prevstart, 4 itemid, 5 id, and 6 action parameters in index.php...
SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities
SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17770/info SunShop Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...