SimpleID 'index.php' Cross Site Scripting Vulnerability

SimpleID is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal Panels Module 6.x PHP Code Execution Vulnerability

A vulnerability has been reported in Panels module for Drupal, which can be exploited by malicious users to compromise a vulnerable system. Certain unspecified input is not properly sanitised before being used in the import functionality. This can be exploited to execute arbitrary PHP code...

SQLiteManager Cross-Site Scripting Vulnerability

This host is running SQLiteManager and is prone to Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagerxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SQLiteManager Cross-Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Network...

LiveZilla <= 3.1.8.3 Multiple XSS Vulnerabilities

LiveZilla is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities

This host is running Valarsoft Webmatic and is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvsoftwebmaticxssnsqlinjvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Valarsoft Webmatic Multiple XSS and SQL Injection Vulnerabilities...

DSA-1937-1 gforge - cross-site scripting

Bulletin has no description...

OpenDocMan Multiple XSS and SQL Injection Vulnerabilities

This host is running OpenDocMan and is prone to multiple Cross-Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodopendocmanxssnsqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OpenDocMan Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S...

DM FileManager 'login.php' Security Bypass Vulnerability

DM FileManager is prone to a security bypass vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

FreeBSD : joomla -- multiple vulnerabilities (bdccd14b-5aac-11de-a438-003048590f9e)

Secunia reports : Some vulnerabilities have been reported in Joomla!, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. Certain unspecified input is not properly sanitised before being used. This can be...

FreeBSD : moinmoin -- multiple XSS vulnerabilities (6a523dba-eeab-11dd-ab4f-0030843d3802)

Secunia reports : Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Certain input passed to...

FreeBSD : awstats -- multiple XSS vulnerabilities (27d78386-d35f-11dd-b800-001b77d09812)

Secunia reports : Morgan Todd has discovered a vulnerability in AWStats, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed in the URL to awstats.pl is not properly sanitised before being returned to the user. This can be exploited to execute arbitrar...

FreeBSD : mediawiki -- multiple vulnerabilities (61b07d71-ce0e-11dd-a721-0030843d3802)

The MediaWiki development team reports : Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Certain unspecified input related to uploads ...

mediawiki -- multiple vulnerabilities

The MediaWiki development team reports: Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Certain unspecified input related to uploads i...

webnews-sql.txt

HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

HACKATTACK Advisory 20081016]WEB//NEWS SQL Injection and Cookie Manipulation

HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

Web Wiz NewsPad 1.02 (sub) Remote Directory Traversal Vulnerability

Exploit for unknown platform in category web applications =================================================================== Web Wiz NewsPad 1.02 sub Remote Directory Traversal Vulnerability =================================================================== AmnPardaz Security Research Team Titl...

Directory Image Gallery XSS vuln.

Sunday, 7 October 2007 Directory Image Gallery XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://splitside.net/store/index.php?mainpage=productinfo&productsid=1 affected versions:Directory Image Gallery 1.1 other versions also can be affected. Directory Image Gallery contains...

Freeside XSS vuln.

Freeside XSS vuln. Vuln. discovered by : r0t Date: 25 September 2007 vendor:www.sisd.com affected versions:Freeside v1.7.2 other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2007/09/freeside-xss-vuln.html Freeside contains a flaw that allows a remote Cross-Sit...

DirectAdmin &lt;= v1.30.2 XSS vuln.

DirectAdmin = v1.30.2 XSS vuln. Vuln. discovered by : r0t Date: 10 September 2007 vendor:http://www.directadmin.com/ orginal advisory: http://pridels-team.blogspot.com/2007/09/directadmin-v1302-xss-vuln.html affected versions:v1.30.2 and previous DirectAdmin contains a flaw that allows a remote...

FreeBSD : joomla -- multiple vulnerabilities (4872d9a7-4128-11dc-bdb0-0016179b2dd5)

A Secunia Advisory reports : joomla can be exploited to conduct session fixation attacks, cross-site scripting attacks or HTTP response splitting attacks. Certain unspecified input passed in comsearch, comcontent and modlogin is not properly sanitised before being returned to a user. This can be...