SAP BusinessObjects 12 - URI redirection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/37972/info SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary script or HTML code,...

Cisco Secure Desktop 3.x - translation Cross-Site Scripting

Cisco Secure Desktop 3.x - translation Cross-Site Scripting source: https://www.securityfocus.com/bid/37960/info Cisco Secure Desktop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

PunBB 1.3 - 'viewtopic.php' Cross-Site Scripting Vulnerability

PunBB 1.3 'viewtopic.php' Cross-Site Scripting Vulnerability. CVE-2010-0455. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37930/info PunBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

phpNagios 'conf[lang]' Parameter Local File Inclusion Vulnerability

The host is running phpNagios and is prone to local file include Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpnagioslfivuln.nasl 5373 2017-02-20 16:27:48Z teissa $ phpNagios 'conflang' Parameter Local File Inclusion Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Zope 'standard_error_message' Cross-Site Scripting Vulnerability

Zope is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

TestLink 1.8.5 - order_by_login_dir Cross-Site Scripting

TestLink 1.8.5 - orderbylogindir Cross-Site Scripting source: https://www.securityfocus.com/bid/37839/info TestLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

Hitmaaan Gallery 1.3 - Multiple Cross-Site Scripting Vulnerabilities

Hitmaaan Gallery 1.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40711/info Hitmaaan Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Mobile Chat 2.0.2 - 'chatsmileys.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Serialsystem 1.0.4 Beta - 'list' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

TestLink 1.8.5 - 'order_by_login_dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37839/info TestLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Serialsystem 1.0.4 Beta - list Cross-Site Scripting

Serialsystem 1.0.4 Beta - list Cross-Site Scripting source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Bits Video Script 2.042.05 - search.php Cross-Site Scripting

Bits Video Script 2.042.05 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40716/info Bits Video Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Bits Video Script 2.04/2.05 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40716/info Bits Video Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Bits Video Script 2.05 Gold Beta - 'showcasesearch.php?rowptem[template]' Remote File Inclusion

source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute...

SystemTap 1.0 - stat-server Arbitrary Command Injection

SystemTap 1.0 - stat-server Arbitrary Command Injection source: https://www.securityfocus.com/bid/37842/info SystemTap is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrar...

Triburom - forum.php Cross-Site Scripting

Triburom - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40316/info Triburom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Triburom - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40316/info Triburom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Joomla! Component com_marketplace 1.2 - catid Cross-Site Scripting

Joomla! Component commarketplace 1.2 - catid Cross-Site Scripting source: https://www.securityfocus.com/bid/37819/info The Joomla! 'commarketplace' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Xforum 1.4 - 'nbpageliste' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37818/info Xforum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...