PT-2011-4426

Name of the Vulnerable Software and Affected Versions Phorum versions prior to 5.2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via the real name parameter in the control.php file of the controlcenter. This can lead to cross-site scripting XSS attacks...

Google VPs Discuss Google+ "Real Name" Rapture Fiasco

Call it the Real Name Rapture: the mass disappearance of untold numbers of Google+ users over the weekend for what many outlets reported were violations of Google’s community standards policy. Rather than getting taken up, however, it appears that Google was cracking down – on funky names,...

CVE-2010-4569

Cross-site scripting XSS vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI...

PT-2011-1608

Name of the Vulnerable Software and Affected Versions Bugzilla versions 3.7.1 through 4.0rc1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI. Recommendation...

CVE-2010-4569: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI...

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

saveFeed $rssversionname, $cacheFile ; ... it calls saveFeed function in an insecure way, arguments are built on $REQUESTversion var and may contain directory traversal sequences... now look at saveFeed function in /rss/feedcreator.class.php ... function saveFeed$filename="", $displayContents=tru...

CVE-2008-3664: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HTML via 1 the real name field, related to the user list; 2 the target parameter to login.php, 3 the title parameter to activities/some.php, 4 the companyname parameter to...

CVE-2008-0124: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Serendipity S9Y before 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via 1 the "Real name" field in Personal Settings, which is presented to readers of articles; or 2 a file upload, as demonstrated by a .htm, .html, or...

Design/Logic Flaw

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2007-1183

WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...

CVE-2007-1186

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2007-1183

WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...

CVE-2007-1186

WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact...

CVE-2007-1183

CVE-2007-1183 concerns WebAPP prior to 0.9.9.5, where remote authenticated users can spoof another user’s Real Name via whitespace. The available sources indicate the impact and attack vectors are unknown, with no concrete exploitation details provided. Affected version is explicitly stated as

CVE-2007-1183: Undefined Security Weakness

WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors...