JSPWiki 2.5.139 - 'UserPreferences.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied input. Attacker-supplied HTML and scri...

SimpNews 2.41.3 - backurl Cross-Site Scripting

SimpNews 2.41.3 - backurl Cross-Site Scripting source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

JSPWiki 2.5.139 - Diff.jsp Multiple Cross-Site Scripting Vulnerabilities

JSPWiki 2.5.139 - Diff.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to...

JSPWiki 2.5.139 - UserPreferences.jsp Multiple Cross-Site Scripting Vulnerabilities

JSPWiki 2.5.139 - UserPreferences.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the applicati...

JSPWiki 2.5.139 - 'Diff.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied input. Attacker-supplied HTML and scri...

JSPWiki 2.5.139 - 'edit.jsp?edittime' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied input. Attacker-supplied HTML and scri...

SimpGB 1.46.2 - '/admin/emoticonlist.php?l_emoticonlist' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25808/info SimpGB is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

JSPWiki 2.5.139 - Comment.jsp Multiple Cross-Site Scripting Vulnerabilities

JSPWiki 2.5.139 - Comment.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails...

JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities

JSPWiki 2.5.139 - NewGroup.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fail...

JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting

JSPWiki 2.5.139 - edit.jsp?edittime Cross-Site Scripting source: https://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately...

SimpNews 2.41.3 - 'l_username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25809/info SimpNews is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

[Full-disclosure] [CAID 35673, 35674, 35675, 35676, 35677]: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35673, 35674, 35675, 35676, 35677: CA ARCserve Backup for Laptops and Desktops Multiple Server Vulnerabilities CA Vuln ID CAID: 35673, 35674, 35675, 35676, 35677 CA Advisory Date: 2007-09-20 Reported By: Sean Larsson VeriSign iDefense Labs...

WebBatch Applications Cross Site Scripting Vulrnability

HSC WebBatch Applications Cross Site Scripting Vulrnability This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

webbatch-xss.txt

HSC WebBatch Applications Cross Site Scripting Vulrnability This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Vigile CMS 1.8 Wiki Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25752/info The Vigile CMS wiki module is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WebBatch - 'webbatch.exe?dumpinputdata' Remote Information Disclosure

source: https://www.securityfocus.com/bid/25744/info WebBatch is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage the cross-site scripting issue to execute arbitrary scri...

WebBatch - webbatch.exe Cross-Site Scripting

WebBatch - webbatch.exe Cross-Site Scripting source: https://www.securityfocus.com/bid/25744/info WebBatch is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage the...

Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...

b1gMail 6.3.1 - hilfe.php Cross-Site Scripting

b1gMail 6.3.1 - hilfe.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25699/info b1gMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripti...

Coppermine Photo Gallery 1.4.12 - 'log' Local File Inclusion

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...