PT-2014-5110

Name of the Vulnerable Software and Affected Versions vBulletin version 5.1.1 Alpha 9 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to...

UBUNTU-CVE-2013-5951

Multiple cross-site scripting XSS vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 application.js.php in scripts/ or 2 admin.php, 3 copymove.php, 4 functions.php, 5 header.php, or 6...

PT-2014-3003

Name of the Vulnerable Software and Affected Versions eXtplorer version 2.1.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to various files, including application.js.php in scripts/, and admin.php, copy move.php, functions.php, header.php,...

CVE-2014-2024

Cross-site scripting XSS vulnerability in classes/controller/error.php in Open Classifieds 2 before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to shared-apartments-rooms/...

PT-2014-4437

Name of the Vulnerable Software and Affected Versions Open Classifieds versions prior to 2.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to shared-apartments-rooms/. This is a type of security vulnerability that c...

PT-2014-2904

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.1-b86 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO. Recommendations For AlgoSec Firewall Analyzer version...

PT-2013-6291

Name of the Vulnerable Software and Affected Versions Tenmiles Helpdesk Pilot affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the PATH INFO to the default URI for a ticket. This could...

PT-2013-5939

Name of the Vulnerable Software and Affected Versions appRain CMF versions 3.0.2 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the PATH INFO to the "blog-by-cat/" endpoint. Recommendations For appRain CMF...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/auditlog/, 2 PATHINFO to info/host/ or 3 viewport/, 4 back parameter to login, or 5 "from" parameter to status/service/recheck...

PT-2013-5731

Name of the Vulnerable Software and Affected Versions Opsview versions prior to 4.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various means, including the id paramet...

PT-2013-4762

Name of the Vulnerable Software and Affected Versions Grandstream GXV3501 versions prior to 1.0.4.44 Grandstream GXV3504 versions prior to 1.0.4.44 Grandstream GXV3601 versions prior to 1.0.4.44 Grandstream GXV3601HD/LL versions prior to 1.0.4.44 Grandstream GXV3611HD/LL versions prior to 1.0.4.4...

PT-2013-4764

Name of the Vulnerable Software and Affected Versions Samsung SHR-5162 Samsung SHR-5082 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO. This could potentially lead to unauthorized access or control of the affected...

PT-2013-5264

Name of the Vulnerable Software and Affected Versions Twilight CMS versions 5.17 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to the "gallery/" page. This could potentially lead to unauthorized actions on...

System: pki-tps XSS flaw

Multiple cross-site scripting XSS vulnerabilities in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 tus/ or 2 tus/tus/...

CVE-2012-5647

Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATHINFO...

PT-2013-1820 · Red Hat · Red Hat Openshift Origin

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Origin versions prior to 1.0.5-3 Description: The issue allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH INFO. Recommendations: For versions prior to 1.0.5-3, update to version 1.0.5-3 or...

PT-2013-1821

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Origin versions prior to 1.0.5-3 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH INFO. This can be exploited by including a malicious...

DEBIAN-CVE-2013-0262

rack/file.rb Rack::File in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATHINFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path...

CVE-2013-0262 rubygem-rack: Path sanitization information disclosure

rack/file.rb Rack::File in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATHINFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 username, or 3 password parameter...