5 matches found
Vizra A_Login.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17949/info Vizra is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...
CVE-2008-7208: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username parameter $usernameb variable to alogin.php or 2 user parameter to staff.php...
Cross site scripting
Cross-site scripting XSS vulnerability in alogin.php in Vizra allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2006-2365: Undefined Security Weakness
Cross-site scripting XSS vulnerability in alogin.php in Vizra allows remote attackers to inject arbitrary web script or HTML via the message parameter...
Vizra - 'A_Login.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17949/info Vizra is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...