SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities

The host is running SQLiteManager and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagermultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities Authors: Rachana Shetty...

Limny 3.0.1 Cross Site Scripting

Limny 3.0.1 login.php Remote URI Based Cross-Site Scripting Vulnerability Vendor: Hamidreza Samak Product web page: http://www.limny.org Affected version: 3.0.1 Summary: Limny is a free and open-source content management framework with a focus on ease to use and develop. It can be used as a stabl...

XSS in OneOrZero AIMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in OneOrZero AIMS, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in OneOrZero AIMS: CVE-2012-0989 Input appended to the URL after index.php is not properly sanitised...

Tiki Wiki CMS Groupware 'show_errors' Parameter Stored XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CA SiteMinder 'target' Parameter Cross-Site Scripting Vulnerability

CA SiteMinder is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability

This host is running APC PowerChute Business Edition and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpowerchutebusinessedtnxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability...

SuSE 11.1 Security Update : empathy (SAT Patch Number 5363)

The following bug has been fixed : - Insufficient quoting of nick names allowed attackers to inject arbitrary html CVE-2011-3635 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting

HomeSeer HS2 2.5.0.20 - Web Interface Log Viewer Page URI Cross-Site Scripting source: https://www.securityfocus.com/bid/50978/info HS2 web interface is prone to multiple security vulnerabilities: 1. An HTML-injection vulnerability. 2. A cross-site request-forgery vulnerability. 3. A...

Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

Hastymail2 'rs' Parameter Cross Site Scripting Vulnerability

The host is running Hastymail2 and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Hastymail2 'rs' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011...

Multiple vulnerabilities in PHPShop CMS Free

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPShop CMS Free, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in PHPShop CMS Free 1.1 Input appended to the URL after multiple files is not properly...

phpMyAdmin Setup Interface Cross Site Scripting Vulnerability

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OCS Inventory NG Persistent Cross-site Scripting Vulnerability

This host is running OCS Inventory NG and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodocsinventoryngxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ OCS Inventory NG Persistent Cross-site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

OCS Inventory NG < 2.0.2 XSS Vulnerability

OCS Inventory NG is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

IBM HTTP Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

phpLDAPadmin '_debug' Cross Site Scripting Vulnerability

This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadmindebugxssvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ phpLDAPadmin 'debug' Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

phpLDAPadmin '_debug' XSS Vulnerability - Active Check

phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability

The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...

Traq 2.2 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23046 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesintraq.html Product: Traq Vendor: Jack Polgar http://traqproject.org/ Vulnerable Version: 2.2 and probably prior Tested Version: 2.2 Vendor Notification: 07 September 2011 Vulnerability Type: XSS, SQL...