VBZoom 1.11 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19803/info VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context o...

VBZoom 1.11 - profile.php Cross-Site Scripting

VBZoom 1.11 - profile.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19803/info VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

Learn.com - Learncenter.asp Cross-Site Scripting

Learn.com - Learncenter.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/19781/info Learn.com learncenter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrar...

Learn.com - 'Learncenter.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19781/info Learn.com learncenter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

MyBB 1.1.7 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/19718/info MyBB is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of the...

BlackBoard Products 6 - Multiple HTML Injection Vulnerabilities

BlackBoard Products 6 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/19308/info Blackboard products are prone to multiple HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before using it in dynamically generate...

cPanel 10.x - dohtaccess.html?dir Cross-Site Scripting

cPanel 10.x - dohtaccess.html?dir Cross-Site Scripting source: https://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have...

cPanel 10.x - showfile.html?File Cross-Site Scripting

cPanel 10.x - showfile.html?File Cross-Site Scripting source: https://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have...

cPanel 10.x - 'showfile.html?File' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities

BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19513/info Multiple cross-site scripting vulnerabilities affect BlaBla 4U because the application fails to properly sanitize user-supplied input before including it in dynamically generated web...

YaBBSE 1.x - index.php Cross-Site Scripting

YaBBSE 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...

YaBBSE 1.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage this issue to have arbitrary script co...

VWar 1.x - 'war.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

VWar 1.x - war.php?page Cross-Site Scripting

VWar 1.x - war.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplie...

VWar 1.x - 'war.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Cross site scripting

VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting CVE-2005-36...

CVE-2006-2481

VMware ESX Server vulnerability CVE-2006-2481 affects ESX 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4. The Management Interface stores authentication credentials in base64-encoded form inside cookies (vmware.mui.kid and vmware.mui.sid). If an attacker can access these cookies (e.g., via cross...

VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities

VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An...

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/19260/info TinyPHPForum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user...

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (2)

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/19260/info TinyPHPForum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...