Vulnerability in Hex-Rays IDA Pro, IDAPython Plugin Could Allow Arbitrary Script Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting IDA Pro running the IDAPython plugin. By default, the IDAPython plugin is installed with all versions of IDA Pro. Microsoft discovered and disclosed the vulnerability under...

CVE-2011-4809

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in th...

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Koha RFI Vulnerability (Jul 2011) - Active Check

Koha is prone to a remote file include RFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51012/info GRAND FlAGallery plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Pet Listing - preview.php Cross-Site Scripting

Pet Listing - preview.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50996/info Pet Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

phpWebSite vulnerable to cross-site scripting

Overview phpWebSite contains a cross-site scripting vulnerability. phpWebSite is a content management system CMS. phpWebSite contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

Axis M10 Series Network Cameras - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Axis M10 Series Network Cameras - Cross-Site Scripting

Axis M10 Series Network Cameras - Cross-Site Scripting source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...

Etomite vulnerable to cross-site scripting

Overview Etomite contains a cross-site scripting vulnerability. Etomite is a content management system CMS. Etomite contains an issue with the processing of contents in the search field, which may result in cross-site scripting. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...

PowerChute Business Edition vulnerable to cross-site scripting

Overview PowerChute Business Edition contains a cross-site scripting vulnerability. PowerChute Business Edition from Schneider Electric is a power management software. PowerChute Business Edition contains a cross-site scripting vulnerability. Jun Okada of GLOBAL TECHNOLOGY CORPORATION reported th...

WordPress Plugin Pretty Link 1.5.2 - 'pretty-bar.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50921/info The Pretty Link plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Contao CMS Cross-Site Scripting Vulnerability

Contao is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

Contao CMS <= 2.10.1 XSS Vulnerability - Active Check

Contao is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Hero 3.69 - 'month' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50878/info Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50860/info 1-jquery-photo-gallery-slideshow-flash plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...