6238 matches found
Unfixed XSS vulnerability at progh2.cug.kr
Security researcher kusomiso.com, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting progh2.cug.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007. It is currently...
Unfixed XSS vulnerability at phpmyadmin.bangputys.hst.lt
Security researcher KaBuS, has submitted on 07/03/2007 a cross-site-scripting XSS vulnerability affecting phpmyadmin.bangputys.hst.lt, which at the time of submission ranked 2546836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2007. It...
Unfixed XSS vulnerability at www.bahcesehir.edu.tr
Security researcher Narcoticxs, has submitted on 28/06/2007 a cross-site-scripting XSS vulnerability affecting www.bahcesehir.edu.tr, which at the time of submission ranked 88011 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/06/2007. It is...
Unfixed XSS vulnerability at www.ogame.dk
Security researcher THE-SH0CK-B0Y, has submitted on 27/06/2007 a cross-site-scripting XSS vulnerability affecting www.ogame.dk, which at the time of submission ranked 237029 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2007. It is...
Fixed XSS vulnerability at www.gambiacrawler.com
Security researcher Uber0n, has submitted on 06/12/2007 a cross-site-scripting XSS vulnerability affecting www.gambiacrawler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is current...
WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW)
WIYS v1.0 Cross-Site Scripting Vulnerability - 05.24.2007 NEW Vulnerability: http://www.target.com/index.php?Page=Sayfa&No="scriptalertdocument.cookie/script Vulnerable: WIYS v1.0 Google d0rk: Bu site FORSNET taraf?ndan WIYS Yaz?l?m?™ ile haz?rlanm?st?r. Script :...
ClonusWiki 0.5 - index.php HTML Injection
ClonusWiki 0.5 - index.php HTML Injection source: https://www.securityfocus.com/bid/24101/info ClonusWiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...
Unfixed XSS vulnerability at www.radioshack.com
Security researcher Hotpockets, has submitted on 18/05/2007 a cross-site-scripting XSS vulnerability affecting www.radioshack.com, which at the time of submission ranked 5369 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is...
Unfixed XSS vulnerability at www.ajanspost.com
Security researcher A.D.T, has submitted on 13/05/2007 a cross-site-scripting XSS vulnerability affecting www.ajanspost.com, which at the time of submission ranked 125013 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/05/2007. It is current...
Fixed XSS vulnerability at affiliatopia.com
Security researcher MaXWeL, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting affiliatopia.com, which at the time of submission ranked 3959852 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2007. It is...
Unfixed XSS vulnerability at 85.911-job.ru
Security researcher zuppergazi, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting 85.911-job.ru, which at the time of submission ranked 1514376 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2007. It is...
Unfixed XSS vulnerability at www.riskmanagementmagazine.com.au
Security researcher www.nullcode.com.ar, has submitted on 04/10/2007 a cross-site-scripting XSS vulnerability affecting www.riskmanagementmagazine.com.au, which at the time of submission ranked 1819794 on the web according to Alexa. We manually validated and published a mirror of this vulnerabili...
QuizShock 1.6.1 - auth.php HTML Injection
QuizShock 1.6.1 - auth.php HTML Injection source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the contex...
QuizShock 1.6.1 - 'auth.php' HTML Injection
source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowi...
Fixed XSS vulnerability at www.meridianhealth.com
Security researcher MaXWeL, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.meridianhealth.com, which at the time of submission ranked 266270 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2007. It is...
Unfixed XSS vulnerability at www.indexkenya.org
Security researcher ftp21, has submitted on 13/03/2007 a cross-site-scripting XSS vulnerability affecting www.indexkenya.org, which at the time of submission ranked 1602467 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/03/2007. It is...
CVE-2007-1405
Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...
JVN#95249468 Fresh Reader RSS feed cross-site scripting vulnerability
Impact An arbitrary script could be executed on the web browser of a Fresh Reader user. Solution Products Affected Fresh Reader Ver 1.0.06053100 and earlier For more information, refer to the vendor's website...
MySpace fails to properly filter user-supplied content
Overview The MySpace web site fails to properly filter user-supplied content, which may allow for cross-site scripting. Description MySpace is a social networking web site that allows users to post blog entries, photos, videos, and other content. MySpace blocks user-supplied JavaScript and VBScri...
JVN#38746816 TikiWiki cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected TikiWiki version 1.9.5 and earlier...