Unfixed XSS vulnerability at www.adventureengine.com

Security researcher LeBaNeSe-XsSeR, has submitted on 03/01/2009 a cross-site-scripting XSS vulnerability affecting www.adventureengine.com, which at the time of submission ranked 1034738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/200...

Unfixed XSS vulnerability at www.thegoodbrothers.com

Security researcher s E t H - X-C3LL, has submitted on 27/02/2009 a cross-site-scripting XSS vulnerability affecting www.thegoodbrothers.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. I...

Unfixed XSS vulnerability at headbang.sk

Security researcher TreX, has submitted on 02/10/2009 a cross-site-scripting XSS vulnerability affecting headbang.sk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is currently unfixed. ...

CVE-2009-0488

Phorum (PHP-based forum software) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 5.2.10. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD entry assigns a CVSSv2 base score of 4.3 (MEDIUM) with network attack ...

CVE-2009-0204

Cross-site scripting XSS vulnerability in HP Select Access 6.1 and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Unfixed XSS vulnerability at developer.klocwork.com

Security researcher Fabian Fingerle, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting developer.klocwork.com, which at the time of submission ranked 719351 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009...

Unfixed XSS vulnerability at www.abdulkadirkocabas.com

Security researcher CaRRiSMaTuRK, has submitted on 30/01/2009 a cross-site-scripting XSS vulnerability affecting www.abdulkadirkocabas.com, which at the time of submission ranked 21249690 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

PHP Photo Album 0.8b - preview Local File Inclusion

PHP Photo Album 0.8b - preview Local File Inclusion START 0x01 Informations: Script : Php Photo Album 0.8 BETA Download : http://sourceforge.net/project/downloading.php?groupid=151573&usemirror=kent&filename=PHPPA.9BETA.zip&37834145 Vulnerability : Local File Inclusion Author : Osirys Contact :...

CVE-2008-5891

Injader before 2.1.2 contains a Cross‑site Scripting (XSS) vulnerability in the profile editing functionality. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented impact includes partial integrity compromise without affecting confidentiality...

PHP vulnerable to cross-site scripting

Overview PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. report...

Unfixed XSS vulnerability at www.thepulsarband.com

Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting www.thepulsarband.com, which at the time of submission ranked 20347078 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It ...

tomcat: Cross-Site-Scripting enabled by sendError call

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

Unfixed XSS vulnerability at www.carfreeday.ca

Security researcher xylitol, has submitted on 12/08/2008 a cross-site-scripting XSS vulnerability affecting www.carfreeday.ca, which at the time of submission ranked 11145476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

CVE-2008-5067

CVE-2008-5067 describes a cross-site scripting (XSS) vulnerability in Kmita Catalogue 2.x, exploitable via search.php parameter q. The connected records confirm the affected software (Kmita Catalogue 2.x) and the vulnerable entry point (search.php), with the underlying issue being improper handli...

Unfixed XSS vulnerability at www.ifoods.tv

Security researcher xylitol, has submitted on 11/11/2008 a cross-site-scripting XSS vulnerability affecting www.ifoods.tv, which at the time of submission ranked 70726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/11/2008. It is currently...

Unfixed XSS vulnerability at www.akhisarli.com

Security researcher BuRaX, has submitted on 11/10/2008 a cross-site-scripting XSS vulnerability affecting www.akhisarli.com, which at the time of submission ranked 7190562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Unfixed XSS vulnerability at www.ebace.aero

Security researcher xylitol, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.ebace.aero, which at the time of submission ranked 1383553 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is current...

Unfixed XSS vulnerability at sourcecodeguru.com

Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting sourcecodeguru.com, which at the time of submission ranked 11222920 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at www.davisandelkins.edu

Security researcher Tr0jAn, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting www.davisandelkins.edu, which at the time of submission ranked 1616930 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.cppgameprogramming.com

Security researcher Mystick, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting www.cppgameprogramming.com, which at the time of submission ranked 918775 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It...