7703 matches found
JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution
Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product. This vulnerability is...
Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting
Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31107/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...
Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/31060/info Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via 1 the real name field, related to the user list; 2 the target parameter to login.php, 3 the title parameter to activities/some.php, 4 the companyname parameter to...
FreeBSD Ports: openwebmail
The remote host is missing an update to the system as announced in the referenced advisory. VID c5519420-cec2-11d8-8898-000d6111a684 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CeleronDude Uploader 6.1 - account.php Cross-Site Scripting
CeleronDude Uploader 6.1 - account.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31010/info Celerondude Uploader is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
Blogn vulnerable to cross-site scripting
Overview Blogn from R-ONE Computer contains a cross-site scripting vulnerability. Blogn from R-ONE Computer is software for creating blogs. Blogn contains a cross-site scripting vulnerability. Masako Ohno of NetAgent Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution
Overview La!cooda WIZ and LacoodaST contain a vulnerability which may allow a malicious user to execute an arbitrary PHP script on the server. La!cooda WIZ from System Consultants Co., Ltd. and LacoodaST from SpaceTag, Inc. are groupware providing schedule and task managements, etc. La!cooda WIZ...
La!cooda WIZ and LacoodaST vulnerable to cross-site scripting
Overview La!cooda WIZ and LacoodaST contain a cross-site scripting vulnerability. La!cooda WIZ from System Consultants Co., Ltd. and LacoodaST from SpaceTag, Inc. are groupware providing schedule and task managements, etc. La!cooda WIZ and LacoodaST contain a cross-site scripting vulnerability...
IDevSpot BizDirectory 2.04 - page Cross-Site Scripting
IDevSpot BizDirectory 2.04 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...
IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
GenPortal - buscarCat.php Cross-Site Scripting
GenPortal - buscarCat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
GenPortal - 'buscarCat.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/30951/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...
MatterDaddy Market 1.1 - login.php Cross-Site Scripting
MatterDaddy Market 1.1 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30848/info MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...
Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting
Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30849/info ASP Search Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
