eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41517/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

Real Estate Manager 1.0.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41507/info Real Estate Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Real Estate Manager 1.0.1 - index.php Cross-Site Scripting

Real Estate Manager 1.0.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41507/info Real Estate Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41548/info FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

CruxPA 2.00 Cross Site Scripting

================================================ Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS...

osCSS 1.2.2 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

osCSS 1.2.2 - page Cross-Site Scripting

osCSS 1.2.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

RunCMS 2.1 - check.php Cross-Site Scripting

RunCMS 2.1 - check.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41448/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

RunCMS 2.1 - 'check.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41448/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41453/info Worxware DCP-Portal is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

nuBuilder Local File Include and Cross Site Scripting Vulnerabilities

nuBuilder is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41387/info i-Net Solution Matrimonial Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Orbis CMS 1.0.2 - editor-body.php Cross-Site Scripting

Orbis CMS 1.0.2 - editor-body.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Mahara Multiple Remote Vulnerabilities

Mahara is prone to multiple remote vulnerabilities, including: 1. Multiple HTML-injection vulnerabilities 2. A cross-site request-forgery vulnerability 3. Multiple SQL-injection vulnerabilities 4. An authentication-bypass vulnerability Exploiting these issues could allow an attacker to steal...

Bitweaver 2.7 - fImg Cross-Site Scripting

Bitweaver 2.7 - fImg Cross-Site Scripting source: https://www.securityfocus.com/bid/41421/info Bitweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

odCMS 1.07 - archive.php Cross-Site Scripting

odCMS 1.07 - archive.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41422/info odCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

NewsOffice 2.0.18 - news_show.php Cross-Site Scripting

NewsOffice 2.0.18 - newsshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41419/info NewsOffice is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...