CVE-2008-2192: Improper Control of Generation of Code

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

CVE-2007-4115

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

CVE-2007-4115

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

CVE-2007-4115

IT!CMS (itcms) 0.2 is affected by multiple XSS vulnerabilities. The flaw allows remote attackers to inject arbitrary script/HTML via the wndtitle parameter in lang-en.php, menu-ed.php, or titletext-ed.php. Root cause is not explicitly detailed in the provided documents; CVSS data indicates a MEDI...

CVE-2007-4115: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in IT!CMS itcms 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to 1 lang-en.php, 2 menu-ed.php, or 3 titletext-ed.php...

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker...

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - lang-en.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - menu-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...