wordpress -- XSS in administration panel

Pages in the administration panel of Wordpress are vulnerable for XSS attacks...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

ProductCart 1.51.62.0 - login.asp SQL Injection

ProductCart 1.51.62.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other...

ProductCart 1.5/1.6/2.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other attacks may also be possible...

FipsGuestbook Version 1.12.7 script injection.

Date: 14.04.2003 Subject: FipsGuestbook Version 1.12.7 script injection. Description: Written entirely in ASP and VBScript, easy to install ASP guestbook manager with web based administration panel. Vendor: FipsASP http://www.fips.at.tf Vulnerability: newentry.asp neglects filtering user input...