Cross Site Scripting vulnerability in Diferior

Vulnerability ID: HTB22722 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability Type:...

Diferior 8.03 Cross Site Scripting

====================================== Vulnerability ID: HTB22722 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification...

Frog CMS 0.9.5 - Multiple Vulnerabilities

Frog CMS 0.9.5 - Multiple Vulnerabilities Vulnerability ID: HTB22685 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfrogcms.html Product: Frog CMS Vendor: Philippe Archambault http://www.madebyfrog.com/ Vulnerable Version: 0.9.5 and probably prior versions Vendor Notification: 09 November...

Micro CMS 1.0 - name HTML Injection (2)

Micro CMS 1.0 - name HTML Injection 2 source: https://www.securityfocus.com/bid/44300/info Micro CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

PhreeBooks <= 2.1 Multiple Vulnerabilities - Active Check

PhreeBooks is prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mollify <= 1.6 XSS Vulnerability

Mollify is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Prado Portal 1.2 - page Cross-Site Scripting

Prado Portal 1.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/42276/info Prado Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Jira 4.0.1 - Cross-Site Scripting Information Disclosure

Jira 4.0.1 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/42025/info Jira is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input...

Jira 4.0.1 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/42025/info Jira is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to obtain sensitive...

Pligg 1.0.4 Cross Site Scripting

Vulnerability ID: HTB22467 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpliggsearchmodule.html Product: Pligg Vendor: Pligg, LLC http://www.pligg.com/demo/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

CANDID - imageview.php?image_id SQL Injection

CANDID - imageview.php?imageid SQL Injection source: https://www.securityfocus.com/bid/41216/info CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...

Mini Web Server Cross Site Scripting and Directory Traversal Vulnerabilities

Mini Web Server is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenDocMan 1.2.5 - 'department.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'admin.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpbasicsearchView.jsp Multiple Cross-Site Scripting Vulnerabilities

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpbasicsearchView.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly...

TuttoPHP Morris Guestbook - view.php Cross-Site Scripting

TuttoPHP Morris Guestbook - view.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36415/info Morris Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

Beex - 'partneralle.php?navaction' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42451/info Beex is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...

68 Classifieds 4.1 - 'toplistings.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

PHP Scripts Now Hangman - 'index.php?n' SQL Injection

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/35544/info Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, ste...