UBBCentral UBB.Threads 7.5.6 - 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Limny 3.0.1 - 'login.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Limny 3.0.1 - login.php Script Cross-Site Scripting

Limny 3.0.1 - login.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting

UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

WordPress Plugin WHOIS 1.4.2 3 - 'domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin WP Live.php 1.2.1 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Siena CMS 1.242 - err Cross-Site Scripting

Siena CMS 1.242 - err Cross-Site Scripting source: https://www.securityfocus.com/bid/51218/info Siena CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Siena CMS 1.242 - 'err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51218/info Siena CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51037/info The Welcomizer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may levera...

Neturf eCommerce Shopping Cart - 'searchFor' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55667/info Neturf eCommerce Shopping Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Barracuda Control Center 620 - Cross-Site Scripting HTML Injection

Barracuda Control Center 620 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/51156/info Barracuda Control Center 620 is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Barracuda Control Center 620 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/51156/info Barracuda Control Center 620 is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and scri...

PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

BrowserCRM 5.100.1 - login[] Cross-Site Scripting

BrowserCRM 5.100.1 - login Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

BrowserCRM 5.100.1 - contact_id SQL Injection

BrowserCRM 5.100.1 - contactid SQL Injection source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in th...

BrowserCRM 5.100.1 licence/view.php framed Parameter XSS

BrowserCRM 5.100.1 licence/view.php framed Parameter XSS. CVE-2011-5214 . Webapps exploit for php platform source: http://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to...

BrowserCRM 5.100.1 - URI Cross-Site Scripting

BrowserCRM 5.100.1 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

BrowserCRM 5.100.1 - parent_id SQL Injection

BrowserCRM 5.100.1 - parentid SQL Injection source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...