Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

Chyrp 2.x - 'action' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

Plone vulnerable to cross-site scripting

Overview Plone contains a cross-site scripting vulnerability. Plone is an open source content management system CMS. Plone contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

Tiki Wiki CMS Groupware 7.2 - snarf_ajax.php Cross-Site Scripting

Tiki Wiki CMS Groupware 7.2 - snarfajax.php Cross-Site Scripting source: https://www.securityfocus.com/bid/48806/info Tiki Wiki CMS Groupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48805/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

CVE-2011-2743

Multiple cross-site scripting XSS vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to 1 the default URI or 2 includes/javascript.php, or the 3 title or 4 body parameter to admin/help.php...

Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery HTML Injection

Iskratel SI2000 Callisto 821+ - Cross-Site Request Forgery HTML Injection source: https://www.securityfocus.com/bid/48711/info The Iskratel SI2000 Callisto 821+ is prone to a cross-site request-forgery vulnerability and multiple HTML-injection vulnerabilities. An attacker can exploit the cross-si...

Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting

Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability...

Flowplayer 3.2.7 - 'linkUrl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48651/info Flowplayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Classified Script - c-BrowseClassified Cross-Site Scripting

Classified Script - c-BrowseClassified Cross-Site Scripting source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

Classified Script - c-BrowseClassified Cross-Site Scripting

source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cybozu Products Images Cross-Site Scripting Vulnerability

This host is running Cybozu Office or Cybozu Garoon and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodcybozuproductsxssvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Cybozu Products Images Cross-Site Scripting Vulnerability Authors: Sooraj KS Copyright:...

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48471/info Joomla! CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute...

WeblyGo vulnerable to cross-site scripting

Overview WeblyGo provided by KAWAI BUSINESS SOFTWARE CO., LTD. KBS contains a cross-site scripting vulnerability. WeblyGo is a groupware provided by KAWAI BUSINESS SOFTWARE CO., LTD. KBS. WeblyGo contains a cross-site scripting vulnerability. Yoshihiro Ishikawa of LAC reported this vulnerability ...

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Cisco Unified Operations Manager 8.5 - iptmfaultmonuidojoMaineventmon_wrapper.jsp Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmfaultmonuidojoMaineventmonwrapper.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to proper...

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-suppli...

Cisco Unified Operations Manager 8.5 - iptmadvancedfind.do?extn Cross-Site Scripting

Cisco Unified Operations Manager 8.5 - iptmadvancedfind.do?extn Cross-Site Scripting source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

Cisco Unified Operations Manager 8.5 - iptmddv.do?deviceInstanceName Cross-Site Scripting

Cisco Unified Operations Manager 8.5 - iptmddv.do?deviceInstanceName Cross-Site Scripting source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

Cisco Unified Operations Manager 8.5 - iptm/eventmon Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...