NetFlow Analyzer 5 - '/jspui/selectDevice.jsp?rtype' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24766/info NetFlow Analyzer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

OpManager 67 - traceRoute.do?name Cross-Site Scripting

OpManager 67 - traceRoute.do?name Cross-Site Scripting source: https://www.securityfocus.com/bid/24767/info OpManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

OpManager 67 - adminServiceConfiguration.do?Operation Cross-Site Scripting

OpManager 67 - adminServiceConfiguration.do?Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/24767/info OpManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

OpManager 6/7 - reports/ReportViewAction.do Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24767/info OpManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Oliver - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24754/info Oliver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Plume CMS 1.0.4 - index.php?_PX_config[manager_path] Remote File Inclusion

Plume CMS 1.0.4 - index.php?PXconfigmanagerpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the...

Claroline 1.8.3 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Moodle 1.7.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24748/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context ...

Claroline 1.8.3 - $_SERVER[PHP_SELF] Multiple Cross-Site Scripting Vulnerabilities

Claroline 1.8.3 - $SERVERPHPSELF Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

Yoggie Pico and Pico Pro Backticks - Remote Code Execution

Yoggie Pico and Pico Pro Backticks - Remote Code Execution source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to...

ETicket 1.5.5 - 'Open.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary...

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - 'setup.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI...

Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities

Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24626/info Calendrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Key Focus Web Server 3.1 - Index.WKF Cross-Site Scripting

source: https://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Joomla! Mambo Component Mod_Forum - PHPBB_Root.php Remote File Inclusion

Joomla! Mambo Component ModForum - PHPBBRoot.php Remote File Inclusion source: https://www.securityfocus.com/bid/24591/info The 'modforum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An...

Joomla! / Mambo Component Mod_Forum - 'PHPBB_Root.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/24591/info The 'modforum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containin...

Wrapper.php for osCommerce - Local File Inclusion

Wrapper.php for osCommerce - Local File Inclusion source: https://www.securityfocus.com/bid/24565/info Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view...

FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVAR_SCRIPTRUN Cross-Site Scripting

FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVARSCRIPTRUN Cross-Site Scripting source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

TDizin - Arama.asp Cross-Site Scripting

TDizin - Arama.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/24515/info TDizin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attac...