Utopia News Pro 1.1.3 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15027/info Utopia News Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execut...

CVE-2005-3047: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PMFCONFversion parameter to footer.php or 2 PMFLANGmetaLanguage to header.php...

CVE-2005-2776

Multiple cross-site scripting XSS vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the 1 versionfullname, 2 versionhomepage, or 3 versionno parameter to footer.php, or the 4 versionfullname, 5 versionno, 6 versionauthor, 7 versionemail...

CVE-2005-2776

CVE-2005-2776: Looking Glass 20040427 is affected by multiple XSS vulnerabilities due to unsanitized input in header.php and footer.php. Attackers can inject arbitrary script via parameters: (1) version[fullname], (2) version[homepage], (3) version[no] to footer.php; and (4) version[fullname], (5...

CVE-2005-2776: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the 1 versionfullname, 2 versionhomepage, or 3 versionno parameter to footer.php, or the 4 versionfullname, 5 versionno, 6 versionauthor, 7 versionemail...

CVE-2005-2688: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to 1 footer.php, 2 header.php, 3 menudx.php, or 4 menusx.php, or Javascript code in the 5 HTTPREFERER referer or 6 HTTPUSERAGENT us...

CVE-2005-2539: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the 1 bodycolor, 2 backimage, 3 theme, or 4 logo parameter to structure.php, 5 admin, 6 adminmail, or 7 back parameter to footer.php,...

CVE-2004-2155: Undefined Security Weakness

Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to 1 config/, 2 bookmarks.php, 3 footer.php, 4 main.php, 5 tree.php, or 6 functions.php...

CVE-2005-1895

Cross-site scripting XSS vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to 1 help.php or 2 footer.php...

CVE-2005-1895: Undefined Security Weakness

Cross-site scripting XSS vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to 1 help.php or 2 footer.php...