SafeSHOP 1.5.6 Cross Site Request Forgery / Cross Site Scripting / SQL Injection

Exploit Title: SafeSHOP | www.DigitalWhisper.co.il Software Link: safeshop.co.il Version: = 1.5.6 Tested on: ASP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web sites. Cross-site...

ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

CVE-2009-4320: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding TNG 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2009-4234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in loginpages/erroruser.shtml on the Micronet Network Access Controller SP1910 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2009-3222: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in FreeWebScriptz Honest Traffic FWSHT 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-6876

Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...

CVE-2009-2588: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Hotscripts Type PHP Clone Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...

CVE-2008-6876: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in EsPartenaires 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...

CVE-2009-2589: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Hutscripts PHP Website Script allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 feedback.php, 2 index.php, and 3 lostpassword.php...

CVE-2009-2581: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-6868: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in default/login.php in EditeurScripts EsBaseAdmin 2.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the EsContacts 1.0 issue is covered in CVE-2008-2037...

CVE-2008-6847: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-6839: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2009-2033

Cross-site scripting XSS vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2009-2033: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

CVE-2009-1614: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter aka the message in an article comment or 2 the searchterm parameter aka the search post form. NOTE: some of these details are obtained from thi...

CVE-2008-6715: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to 1 homeadmin/adminhome.php and 2 homeadmin/signinform.php...

CVE-2009-0857

Cross-site scripting XSS vulnerability in /prm/reports in the Performance Reporting Module PRM for Sun Management Center SunMC 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console...

CVE-2009-0857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in /prm/reports in the Performance Reporting Module PRM for Sun Management Center SunMC 3.6.1 and 4.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: this can be leveraged for access to the SunMC Web Console...