Bitweaver 2.7 - fImg Cross-Site Scripting

Bitweaver 2.7 - fImg Cross-Site Scripting source: https://www.securityfocus.com/bid/41421/info Bitweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Mahara Multiple Remote Vulnerabilities

Mahara is prone to multiple remote vulnerabilities, including: 1. Multiple HTML-injection vulnerabilities 2. A cross-site request-forgery vulnerability 3. Multiple SQL-injection vulnerabilities 4. An authentication-bypass vulnerability Exploiting these issues could allow an attacker to steal...

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42157/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

FuseTalk 3.2/4.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42157/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Xplico 0.5.7 - add.ctp Cross-Site Scripting (2)

Xplico 0.5.7 - add.ctp Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/41322/info Xplico is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Flatnux 2010-06.09 - find Cross-Site Scripting

Flatnux 2010-06.09 - find Cross-Site Scripting source: https://www.securityfocus.com/bid/41282/info Flatnux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

DPScms - q SQL Injection Cross-Site Scripting

DPScms - q SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41273/info DPScms is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attack...

Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

XSS vulnerability in PortalApp

Vulnerability ID: HTB22442 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinportalapp1.html Product: PortalApp Vendor: Latek Vulnerable Version: 4.0 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

Grafik CMS - admin.php SQL Injection Cross-Site Scripting

Grafik CMS - admin.php SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41227/info Grafik CMS is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...

ArcademSX 2.904 - cat Cross-Site Scripting

ArcademSX 2.904 - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/41252/info ArcademSX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Iatek PortalApp 3.34.0 - login.asp Multiple Cross-Site Scripting Vulnerabilities

Iatek PortalApp 3.34.0 - login.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41224/info Iatek PortalApp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

CANDID - '/image/view.php?image_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41216/info CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

MySpace Clone 2010 - SQL Injection Cross-Site Scripting

MySpace Clone 2010 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41199/info MySpace Clone 2010 is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow a...

MySpace Clone 2010 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41199/info MySpace Clone 2010 is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Limny 2.1 - q Cross-Site Scripting

Limny 2.1 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/41152/info Limny is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

OneCMS 2.6.1 - short1 Cross-Site Scripting

OneCMS 2.6.1 - short1 Cross-Site Scripting source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-base...

OneCMS 2.6.1 - cat Cross-Site Scripting

OneCMS 2.6.1 - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

Limny 2.1 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41152/info Limny is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...