PHP 5.x < 5.2 Multiple Vulnerabilities

According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2. Such versions may be affected by several buffer overflows. To exploit these issues, an attacker would need the ability to upload an arbitrary PHP script on the remote server or to manipulate several...

Velocity does not automatically escape HTML entities when substituting variables

Velocity should automatically escape encode HTML entities in variables it interpolates in markup. This would remove the need for explicitly escaping variables using $generalUtil.htmlEncode, and fix lots of XSS bugs including ones we haven't discovered yet. This affects all versions of Confluence...

Velocity does not automatically escape HTML entities when substituting variables

Velocity should automatically escape encode HTML entities in variables it interpolates in markup. This would remove the need for explicitly escaping variables using $generalUtil.htmlEncode, and fix lots of XSS bugs including ones we haven't discovered yet. This affects all versions of Confluence...

Velocity does not automatically escape HTML entities when substituting variables

Velocity should automatically escape encode HTML entities in variables it interpolates in markup. This would remove the need for explicitly escaping variables using $generalUtil.htmlEncode, and fix lots of XSS bugs including ones we haven't discovered yet. This affects all versions of Confluence...

[Full-disclosure] HomestayFinder XSS Vulnerability in Wikipedia Mirror

There is an XSS vulnerability in HomestayFinder's 'Dictionary.aspx' script which is responsible for mirroring the content of Wikipedia. I found this interesting because here a script injected in one website exploits an XSS vulnerability in another website. I am including only a short example to...

jetboxcms-xss.txt

hi there jetbox cms is also vulnerable to severals xss GET: http://127.0.0.1/jetbox/index.php/view/search/?path=xss http://127.0.0.1/jetbox/index.php/view/supplynews/?companyname=xss http://127.0.0.1/jetbox/index.php/view/supplynews/?companyname=1&country=xss...

[Full-disclosure] Fizzle : Firefox Extension Vulnerability

Fizzle allows feeds to use HTML in feed data resulting in JavaScript being run in the chrome: window with chrome permissions. The extension will convert HTML entities back to their ASCII equivalents thus becomes and so forth. Various feeds fields are vulnerable including the title which allows th...

Cross site scripting

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2007-1028

Cross-site scripting XSS vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element...

CVE-2005-0649

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

CVE-2005-0649

Pixel-Apes SafeHTML prior to version 1.2.1 is vulnerable to bypassing XSS protection via hexadecimal HTML entities. Affected: SafeHTML component (pre-1.2.1). Root cause: input handling allows bypass of HTML entity encoding to defeat XSS protections. Impact: potential remote XSS. Exploitation deta...

CVE-2005-0649

Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting XSS protection via "hexadecimal HTML entities."...

CVE-2005-0648

Pixel-Apes SafeHTML (pre-1.3.0) contains vulnerabilities that allow remote attackers to bypass XSS protections via (1) decimal HTML entities or (2) the null byte \x00 symbol. Affected component is SafeHTML prior to version 1.3.0. Impact is HTML/script injection bypass of protections; no other sys...

[SA13869] SafeHTML Hexadecimal HTML Entities Security Bypass

TITLE: SafeHTML Hexadecimal HTML Entities Security Bypass SECUNIA ADVISORY ID: SA13869 VERIFY ADVISORY: http://secunia.com/advisories/13869/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SafeHTML 1.x http://secunia.com/product/4527/ DESCRIPTION: Christian...