4774 matches found
RunCMS 1.x - Bigshow.php Cross-Site Scripting
RunCMS 1.x - Bigshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16970/info RunCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML...
Game-Panel 2.6 - login.php Cross-Site Scripting
Game-Panel 2.6 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16979/info Game-Panel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated...
Qto File Manager 1.0 - index.php Cross-Site Scripting
Qto File Manager 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18510/info Qto file manager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...
Qto File Manager 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18510/info Qto file manager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
HitHost 1.0 - 'deleteuser.php?user' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17025/info HitHost is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...
DVGuestbook 1.0/1.2.2 - 'dv_gbook.php?f' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16968/info DVGuestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...
Game-Panel 2.6 - 'login.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16979/info Game-Panel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content. An attacker may leverage this iss...
phpArcadeScript 2.0 loginbox.php login_status Parameter XSS
phpArcadeScript 2.0 loginbox.php loginstatus Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...
Woltlab Burning Board 2.3.4 - misc.php Cross-Site Scripting
Woltlab Burning Board 2.3.4 - misc.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16959/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue t...
Easy Forum 2.5 - New User Image File HTML Injection
source: https://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...
NZ eCommerce System - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/16931/info NZ Ecommerce is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access o...
QwikiWiki 1.4 - index.php Cross-Site Scripting
QwikiWiki 1.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16874/info QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Woltlab Burning Board 1.1.12.x - galerie_onfly.php Cross-Site Scripting
Woltlab Burning Board 1.1.12.x - galerieonfly.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker ma...
n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities
n8cms 1.11.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input...
PEHEPE Membership Management System 3.0 - Sol_menu.php Cross-Site Scripting
PEHEPE Membership Management System 3.0 - Solmenu.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplie...
PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
CVE-2006-0868
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."...
JGS-Gallery 4.0 - Board jgs_galerie_scroll.php?userid Cross-Site Scripting
JGS-Gallery 4.0 - Board jgsgaleriescroll.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/16810/info JGS-Gallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may levera...
PHPX 3.5.9 - XCode Tag HTML Injection
PHPX 3.5.9 - XCode Tag HTML Injection source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code woul...
PHPX 3.5.9 - XCode Tag HTML Injection
source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of the...