PT-2012-2993

Name of the Vulnerable Software and Affected Versions KnowledgeTree versions 3.7.0.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific API endpoints, including "login.php", "admin.php", or "preferences.php". This can be...

PT-2012-5338

Name of the Vulnerable Software and Affected Versions Flogr versions 2.5.6 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the PATH INFO o...

PT-2012-4588

Name of the Vulnerable Software and Affected Versions Kayako Fusion versions 4.40.1148 through 4.50.1581 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO in the...

PT-2012-5622

Name of the Vulnerable Software and Affected Versions FreePBX versions 2.9 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This can be achieved through various parameters and endpoints, including the conte...

PT-2012-5550

Name of the Vulnerable Software and Affected Versions Arbor Networks Peakflow SP versions 5.1.1 through 5.1.1 before patch 6 Arbor Networks Peakflow SP versions 5.5 through 5.5 before patch 4 Arbor Networks Peakflow SP version 5.6.0 before patch 1 Description A cross-site scripting XSS issue allo...

PT-2012-5268

Name of the Vulnerable Software and Affected Versions Total Shop UK eCommerce Open Source versions prior to 2.1.2 p1 Description A cross-site scripting XSS issue exists due to insufficient input validation in the refresh page function. This allows remote attackers to inject arbitrary web script o...

PT-2012-5299

Name of the Vulnerable Software and Affected Versions Bad Behavior plugin versions prior to 2.0.47 Bad Behavior plugin versions 2.2.x prior to 2.2.5 Description The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters, including PATH INFO, httpbl key, httpbl...

PT-2012-4366

Name of the Vulnerable Software and Affected Versions User Photo plugin versions prior to 0.9.5.2 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the userphoto options page function in user-photo.php, allowing remote attackers to inject arbitrary web scrip...

PT-2012-3147

Name of the Vulnerable Software and Affected Versions ContentLion Alpha version 1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the PATH INFO in system/classes/login.php. Recommendations For ContentLio...

PT-2012-3057

Name of the Vulnerable Software and Affected Versions lknSupport affected versions not specified Description A cross-site scripting XSS issue exists in the search module of lknSupport, specifically in the module/kb/search word component. This allows remote attackers to inject arbitrary web script...

CVE-2011-5076

SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATHINFO to index.php. NOTE: some of these details are obtained from third party information...

PT-2012-2054

Name of the Vulnerable Software and Affected Versions HDWiki versions 5.0 through 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PATH INFO to index.php, specifically targeting the model/comment.class.php file. Recommendation...

PT-2012-2960

Name of the Vulnerable Software and Affected Versions Acidcat CMS versions 3.5.1, 3.5.2, 3.5.6, and possibly earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific API endpoints, including "admin colors.asp", "admin config.asp",...

PT-2012-2934

Name of the Vulnerable Software and Affected Versions Beehive Forum version 1.0.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved by manipulating the PATH INFO to specific API endpoints, such as "forum/register.php" or "forum/logon.php"...

PT-2011-5170 · Pligg · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 1.1.4 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to the search program. Recommendations: For Pligg CMS version 1.1.4, update to a version th...

CVE-2011-4814

Multiple cross-site scripting XSS vulnerabilities in Dolibarr 3.1.0 RC and probably earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 admin/boxes.php, 3 comm/clients.php, 4 commande/index.php; and the optioncss parameter to 5 admin/ihm.php an...

PT-2011-5120 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 3.1.0 RC and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved by manipulating the PATH INFO to...

PT-2011-4981

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.3.9h Description The issue is related to multiple cross-site scripting XSS vulnerabilities. These vulnerabilities might allow remote attackers to inject arbitrary web script or HTML via the main page parameter or PATH INFO...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

PT-2011-4932 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 3.1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the username parameter in a setup action to "admin/company.php", or the PATH INFO to "admin/security...