phpGroupWare 0.9.x - index.php HTML Injection

phpGroupWare 0.9.x - index.php HTML Injection source: https://www.securityfocus.com/bid/12082/info PhpGroupWare is reported to be susceptible to a HTML injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input. The attacker-supplied HTML and...

Captaris (Infinite) WebMail XSS

I figured it was about time I hopped on the XSS band-wagon. Captaris www.captaris.com Infinite WebMail application is vulnerable to Cross-Site Scripting XSS attacks. The application fails to filter the following tags that can both be used to redirect a user to an attack script: Launch on e-mail...

CVE-2001-0693

WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...