CVE-2013-2651

Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...

CVE-2013-2651

BoltWire

CVE-2013-2651: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...

PT-2013-3868

Name of the Vulnerable Software and Affected Versions BoltWire versions 3.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the content parameter or the p parameter to the "index.php" endpoint. Recommendations For BoltWire...

[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5

============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: March 20th, 2013 - Last revised: March 25th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2013-2651...

BoltWire 3.5 Cross Site Scripting Vulnerability

BoltWire versions 3.5 and beloBoltWire versions 3.5 and below suffer from multiple cross site scripting vulnerabilities.w suffer from multiple cross site scripting vulnerabilities. ============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: Mar...

BoltWire 3.5 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: March 20th, 2013 - Last revised: March 25th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2013-2651...

BoltWire 3.4.16 Multiple XSS vulnerabilities

Advisory: BoltWire 3.4.16 Multiple XSS vulnerabilities Advisory ID: SSCHADV2012-001 Author: Stefan Schurtz Affected Software: Successfully tested on BoltWire 3.4.16 Vendor URL: http://www.boltwire.com/ Vendor Status: informed ========================== Vulnerability Description...

BoltWire 3.4.16 Cross Site Scripting

Advisory: BoltWire 3.4.16 Multiple XSS vulnerabilities Advisory ID: SSCHADV2012-001 Author: Stefan Schurtz Affected Software: Successfully tested on BoltWire 3.4.16 Vendor URL: http://www.boltwire.com/ Vendor Status: informed ========================== Vulnerability Description...

BoltWire 3.4.16 - index.php Multiple Cross-Site Scripting Vulnerabilities

BoltWire 3.4.16 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51422/info BoltWire is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

BoltWire 3.4.16 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51422/info BoltWire is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...