PT-2014-8880

Name of the Vulnerable Software and Affected Versions Altitude uCI Unified Customer Interaction version 7.5 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via an email hyperlink or...

CVE-2014-9212: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Altitude uAgent in Altitude uCI Unified Customer Interaction 7.5 allow remote attackers to inject arbitrary web script or HTML via 1 an email hyperlink or the 2 style parameter in the image attribute section...

CVE-2010-5086

Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the style parameter...

PT-2012-1329

Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.7 through 2.8.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the style parameter of the wiki/rankings.php file. Recommendation...

CVE-2011-5047

Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...

CVE-2011-5047: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in statusrrdgraph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter...

PT-2012-2027

Name of the Vulnerable Software and Affected Versions pfSense versions prior to 2.0.1 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the style parameter in the status rrd graph.php...

Directory traversal

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

CVE-2010-0967: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Geekhelps ADMP 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the style parameter to 1 colorvoid/footer.php, 2 default-green/footer.php, 3...

Directory traversal

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the style parameter...

CVE-2007-4139: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Temporary Uploads editing functionality wp-admin/includes/upload.php in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php...

Directory traversal

Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 FORUMLANGUAGE parameter to functions.php or the 2 style parameter to bottom.php...

CVE-2007-2854: Undefined Security Weakness

Multiple SQL injection vulnerabilities in accountchange.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 style or 2 langue parameter...