Wordpress Plugin Single Personal Message SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the message parameter of the admin.php page of the Wordpress plugin Sing...

mimafoto.se XSS vulnerability

Vulnerable URL: http://www.mimafoto.se/sections/prophoto/key.php?message=...

fotofr.se XSS vulnerability

Vulnerable URL: http://www.fotofr.se/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

Multiple Cross-Site Scripting Vulnerabilities in TTChat

TTChat is a suite of professional video entertainment software from TigerTom.Com in the UK. TTChat 1.0.4 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the username parameter msg parameter to defaultphp or...

CVE-2014-5458

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-5458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-4568

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2014-4568: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

myBloggie 2.1.2/2.1.3 addcat.php errormsg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

CVE-2013-7318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

SecurityCenter devform.php message Parameter XSS

The version of Tenable Network Security SecurityCenter installed on the remote host contains the 'devform.php' script. This PHP script is affected by a cross-site scripting vulnerability because the application does not properly validate user-supplied input to the 'message' parameter. An attacker...

CVE-2013-5911: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5714: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 message parameter. NOTE: some of these details are...

PT-2013-5746

Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration plugin versions 4.25.3 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the name or message parameter in the ls/htmlchat.php file. This can lead to...

CVE-2013-4098

The CVE-2013-4098 entry concerns DS3 Authentication Server, where ServerAdmin/ErrorViewer.jsp accepts a message parameter that can be used to inject arbitrary error-page text. The public descriptions (NVD, Red Hat, CVE record) repeat this flaw, and an OpenVAS plugin notes DS3 has multiple vulnera...

CVE-2013-4098: Improper Input Validation

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter...

CVE-2012-6514: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the nBill comnbill component 2.3.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the message parameter in an income action to administrator/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

CVE-2012-5315: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web script or HTML via the message parameter to 1 messagesviewer.php, 2 home.php, or 3 history.php...

CVE-2012-5103: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 message parameter...