PT-2011-2422

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a "/entry/signin" action. This could potentially lead to unauthoriz...

CVE-2011-0526: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action...

Unfixed XSS vulnerability at www.ice.com

Security researcher C1c4Tr1Z, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.ice.com, which at the time of submission ranked 22152 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently...

AllMyGuests <= 0.3.0 (AMG_serverpath) Remote Inclusion Vulnerabilities

No description provided by source. AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php...