PG Roommate Finder Solution - viewprofile.php?part Cross-Site Scripting

PG Roommate Finder Solution - viewprofile.php?part Cross-Site Scripting source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

PG Roommate Finder Solution - 'quick_search.php?part' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection

source: https://www.securityfocus.com/bid/35783/info CommuniGate Pro is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to run HTML and script code in the context of the affected site, to steal...

Recipe Script 5.0 - 'First Name' HTML Injection

source: https://www.securityfocus.com/bid/43888/info Recipe Script is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run i...

Recipe Script 5.0 - First Name HTML Injection

Recipe Script 5.0 - First Name HTML Injection source: https://www.securityfocus.com/bid/43888/info Recipe Script is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Computer Associates SiteMinder - '%00' Cross-Site Scripting Protection Security Bypass

source: https://www.securityfocus.com/bid/36086/info Computer Associates SiteMinder is prone to a security-bypass vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to bypass cross-site scripting protections. Successful exploits can aid in...

ClanSphere 2009 - 'text' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35605/info ClanSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Horde 3.1 - Passwd Module Cross-Site Scripting

Horde 3.1 - Passwd Module Cross-Site Scripting source: https://www.securityfocus.com/bid/35573/info The Horde 'Passwd' module is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Sitecore CMS 6.0.0 rev. 090120 - 'default.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44405/info Sitecore CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Google Chrome 0.3.154 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/35572/info Google Chrome is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the context of the user running the application and...

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting source: https://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Apple Safari 4 - reload() Denial of Service

Apple Safari 4 - reload Denial of Service source: https://www.securityfocus.com/bid/35555/info Apple Safari is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to crash the affected application, denying servic...

PRTG Traffic Grapher 'Monitor_Bandwidth' Cross Site Scripting Vulnerability

PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal

source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to retrieve and read...

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow (PoC)

BaoFeng Storm 3.9.62 - .Playlist File Buffer Overflow PoC source: https://www.securityfocus.com/bid/35512/info BaoFeng Storm is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to...

Mini-Stream Multiple Products Stack Overflow Vulnerability

This host has Mini-Stream products installed and is prone to Stack Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodministreammultprdtsbofmay09.nasl 6517 2017-07-04 13:34:20Z cfischer $ Mini-Stream Multiple Products Stack Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyrig...

Intergo Arcade Trade Script 1.0 - q Cross-Site Scripting

Intergo Arcade Trade Script 1.0 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/44555/info Arcade Trade Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Intergo Arcade Trade Script 1.0 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44555/info Arcade Trade Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Eggdrop 'ctcpbuf' Remote Denial Of Service Vulnerability

Eggdrop is prone to a remote denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker may exploit this issue to crash the application, resulting in a denial-of-service condition. This issue is related to the vulnerability described in BID 24070...