JVN#92975133 Loudblog cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly condust session hijacking. Solution Products Affected Loudblog 0.44 and earlier...

JVN#76686161: ServerView cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected ServerView V2.50 - V3.60L98 ServerView V4.10L11 - V4.11L81...

Hosting Controller 1.x - error.asp Cross-Site Scripting

Hosting Controller 1.x - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18933/info Hosting Controller is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue...

Hosting Controller 1.x - 'error.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18933/info Hosting Controller is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue to have arbitrary script code execute in the browser of...

CVE-2006-3383

CVE-2006-3383 is a cross-site scripting (XSS) vulnerability in the index.php file of mAds 1.0. The issue allows remote attackers to inject arbitrary web script or HTML by crafting a URL that triggers Javascript events (e.g., onmouseover). The NVD-derived vector indicates an attack with network ac...

JVN#44846612 ATutor cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Authentication information could be stolen as a result. Solution Products Affected ATutor 1.5.3 RC2 and earlier...

H-Sphere 2.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18677/info H-Sphere is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in th...

MVNForum Activatemember 1.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of a...

Winged Gallery 1.0 - 'Thumb.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18629/info Winged Gallery is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browse...

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass

source: https://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring confirmation from users. A successful attack may allow attackers to access...

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass

Microsoft Office 2003 - Embedded Shockwave Flash Object Security Bypass source: https://www.securityfocus.com/bid/18583/info Microsoft Office is prone to a weakness that may allow remote attackers to execute arbitrary script code contained in Shockwave Flash Objects without first requiring...

Maximus SchoolMAX 4.0.1 - Error_msg Cross-Site Scripting

Maximus SchoolMAX 4.0.1 - Errormsg Cross-Site Scripting source: https://www.securityfocus.com/bid/18563/info Maximus SchoolMAX is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input before displaying it to users of the application. An attacker may levera...

TWiki Privilege Escalation

Binary data 3657.prm...

iFoto 0.20 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18391/info iFoto is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

FlexWATCH Network Camera - Cross-Site Scripting

FlexWATCH Network Camera - Cross-Site Scripting source: https://www.securityfocus.com/bid/18936/info FlexWATCH Network Camera is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Enigma Haber 4.2 - Cross-Site Scripting

Enigma Haber 4.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18226/info Enigma Haber is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CVE-2006-2759: Undefined Security Weakness

jetty 6.0.x jetty6 beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations...

ToendaCMS 0.7 - index.php Cross-Site Scripting

ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18118/info Chipmunk Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...