PT-2014-3399

Name of the Vulnerable Software and Affected Versions Gnew version 2013.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including gnew template to API endpoints such as "users/profile.php", "articles/index.php", ...

CVE-2006-3103

CVE-2006-3103 describes a cross-site scripting (XSS) vulnerability in Bitweaver 1.3, allowing remote attackers to inject arbitrary web script or HTML via (1) the error parameter in users/login.php and (2) the feedback parameter in articles/index.php. The connected records confirm Bitweaver as the...

CVE-2006-3103: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the 1 error parameter in users/login.php and the 2 feedback parameter in articles/index.php...