6298 matches found
Turnkey eBook Store <= 1.1 XSS Vulnerability - Active Check
Turnkey eBook Store is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based...
Mandrake Security Advisory MDVSA-2009:054 (nagios)
The remote host is missing an update to nagios announced via advisory MDVSA-2009:054. OpenVAS Vulnerability Test $Id: mdksa2009054.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:054 nagios Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
BitDefender crossaplication scripting
Filename is displayed without filtering during scanning...
Stable, Beta update: Yahoo! Mail and Security Fixes
Google Chrome's Beta and Stable channels have been updated to 1.0.154.46. Note, we won't have a different release for the Beta channel until we have something Beta-worthy come out of the Dev channel in February. This release fixes issues with two popular webmail providers: Sending mail from Yahoo...
CVE-2008-5971
Cross-site scripting XSS vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...
Unfixed XSS vulnerability at www.21stcentury.com.my
Security researcher Don Tukulesto, has submitted on 21/01/2009 a cross-site-scripting XSS vulnerability affecting www.21stcentury.com.my, which at the time of submission ranked 6090601 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010...
Openfire 3.6.2 - group-summary.jsp Cross-Site Scripting
Openfire 3.6.2 - group-summary.jsp Cross-Site Scripting...
Unfixed XSS vulnerability at vhost.oddcast.com
Security researcher UzmiX, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting vhost.oddcast.com, which at the time of submission ranked 19418 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is currentl...
TurnkeyForms Software Directory 1.0 - SQL Injection Cross-Site Scripting
TurnkeyForms Software Directory 1.0 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/32175/info TurnkeyForms Software Directory is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied...
Unfixed XSS vulnerability at www.earthexpeditions.org
Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting www.earthexpeditions.org, which at the time of submission ranked 4312473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It...
Unfixed XSS vulnerability at london.iwm.org.uk
Security researcher xylitol, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting london.iwm.org.uk, which at the time of submission ranked 140396 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is...
Unfixed XSS vulnerability at www.roma-intercultura.it
Security researcher Flashback, has submitted on 10/10/2008 a cross-site-scripting XSS vulnerability affecting www.roma-intercultura.it, which at the time of submission ranked 4591606 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. I...
CVE-2008-4481
Cross-site scripting XSS vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Unfixed XSS vulnerability at www.carnp.com
Security researcher Wild.D3f4c3r, has submitted on 27/09/2008 a cross-site-scripting XSS vulnerability affecting www.carnp.com, which at the time of submission ranked 77539 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is...
Unfixed XSS vulnerability at www.meta-search-directory.com
Security researcher Uber0n, has submitted on 09/07/2008 a cross-site-scripting XSS vulnerability affecting www.meta-search-directory.com, which at the time of submission ranked 1564425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008...
Unfixed XSS vulnerability at www.mryalikavak.net
Security researcher BackDoor, has submitted on 09/05/2008 a cross-site-scripting XSS vulnerability affecting www.mryalikavak.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is current...
Unfixed XSS vulnerability at www.ssiap.com
Security researcher ironzorg, has submitted on 27/08/2008 a cross-site-scripting XSS vulnerability affecting www.ssiap.com, which at the time of submission ranked 1046465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is current...
Unfixed XSS vulnerability at www.bestpeachtree.com.hk
Security researcher SaMTHG, has submitted on 26/08/2008 a cross-site-scripting XSS vulnerability affecting www.bestpeachtree.com.hk, which at the time of submission ranked 6954726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It i...
JVN#27417220 mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting
mysql-lists from AquaGardenSoft Co.,Ltd. is software to show MySQL data on the web browser. mysql-lists contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the vendor...