ScrewTurn Software ScrewTurn Wiki 2.0.x - System Log Page HTML Injection

ScrewTurn Software ScrewTurn Wiki 2.0.x - System Log Page HTML Injection source: https://www.securityfocus.com/bid/30429/info ScrewTurn Wiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

cPanel 11.x - '/scripts2/changeip?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

cPanel 11.x - scripts2knowlegebase?issue Cross-Site Scripting

cPanel 11.x - scripts2knowlegebase?issue Cross-Site Scripting source: https://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

cPanel 11.x - scripts2listaccts?search Cross-Site Scripting

cPanel 11.x - scripts2listaccts?search Cross-Site Scripting source: https://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

cPanel 11.x - '/scripts2/knowlegebase?issue' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29125/info cPanel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution

Ourgame GLIEDown2.dll ActiveX Control - Remote Code Execution source: https://www.securityfocus.com/bid/29118/info Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input. An attacker can exploit this...

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting

SAP Internet Transaction Server 6200.1017.50954.0 - Bu query String JavaScript Splicing Cross-Site Scripting source: https://www.securityfocus.com/bid/29103/info SAP Internet Transaction Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently...

SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in an error page. An attacker may leverage this issue to execute...

ZyWALL 100 HTTP Referer Header - Cross-Site Scripting

source: https://www.securityfocus.com/bid/29110/info ZyWALL 100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Tux CMS 0.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29090/info Tux CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

LifeType 1.2.8 - admin.php Cross-Site Scripting

LifeType 1.2.8 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29050/info LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

GEDCOM_TO_MYSQL - PHPindex.php?nom_branche Cross-Site Scripting

GEDCOMTOMYSQL - PHPindex.php?nombranche Cross-Site Scripting source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

GEDCOM_TO_MYSQL - PHPinfo.php Multiple Cross-Site Scripting Vulnerabilities

GEDCOMTOMYSQL - PHPinfo.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

LifeType 1.2.8 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29050/info LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

GEDCOM_TO_MYSQL - '/PHP/info.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

GEDCOM_TO_MYSQL - PHPprenom.php Multiple Cross-Site Scripting Vulnerabilities

GEDCOMTOMYSQL - PHPprenom.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

GEDCOM_TO_MYSQL - '/PHP/index.php?nom_branche' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/29029/info SiteXS is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input. An attacker can leverage this issue to execute arbitrary code on an affected...

Alumni 1.0.81.0.9 - info.php?id SQL Injection

Alumni 1.0.81.0.9 - info.php?id SQL Injection source: https://www.securityfocus.com/bid/29019/info Project Alumni is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues...