PHD Help Desk 1.43 - 'atributo.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

PHD Help Desk 1.43 - 'area_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

WordPress Plugin Trashbin 0.1 - mtb_undelete Cross-Site Scripting

WordPress Plugin Trashbin 0.1 - mtbundelete Cross-Site Scripting source: https://www.securityfocus.com/bid/37097/info The Trashbin plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage...

WordPress Plugin Trashbin 0.1 - 'mtb_undelete' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37097/info The Trashbin plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Trashbin Plugin 0.1 - Cross-Site Scripting Vulnerability

Trashbin plugin is prone to a cross-site scripting vulnerability. Application fails to properly sanitize user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication...

CUPS 'kerberos' Parameter XSS Vulnerability

CUPS is prone to a cross site scripting XSS vulnerability because the application fails to sufficiently sanitize user supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress Plugin WP-Cumulus 1.x - 'tagcloud.swf' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37100/info The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Apache mod_perl - Apache::Status Apache2::Status Cross-Site Scripting

Apache modperl - Apache::Status Apache2::Status Cross-Site Scripting source: https://www.securityfocus.com/bid/34383/info The Apache 'modperl' module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting

WordPress Plugin WP-Cumulus 1.x - tagcloud.swf Cross-Site Scripting source: https://www.securityfocus.com/bid/37100/info The WP-Cumulus plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

TFTgallery 0.13 - sample Cross-Site Scripting

TFTgallery 0.13 - sample Cross-Site Scripting source: https://www.securityfocus.com/bid/36898/info TFTgallery is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

PacketVideo Twonky Server 4.4.17/5.0.65 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41929/info Twonky Server is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...

OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Snitz Forums 2000 Cross Site Scripting and HTML Injection Vulnerabilities

Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

BloofoxCMS 0.3.5 - search Cross-Site Scripting

BloofoxCMS 0.3.5 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/36700/info bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverag...

Snitz Forums 2000 3.4.7 - pop_send_to_friend.asp?url Cross-Site Scripting

Snitz Forums 2000 3.4.7 - popsendtofriend.asp?url Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting

Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

FreeSchool - 'key_words' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42513/info FreeSchool is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

AdaptBB 1.0 - q Cross-Site Scripting

AdaptBB 1.0 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

AdaptBB 1.0 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...