PostNuke 0.76 RC4b - 'user.php?htmltext' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14635/info PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. This can lead to theft of cookie-based authentication credentials, as well as oth...

PerlDiver 2.31 - Perldiver.cgi Cross-Site Scripting

PerlDiver 2.31 - Perldiver.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/14894/info PerlDiver is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

Land Down Under 800 - journal.php?w Cross-Site Scripting

Land Down Under 800 - journal.php?w Cross-Site Scripting source: https://www.securityfocus.com/bid/14619/info Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

PHPFreeNews 1.40 - NewsCategoryForm.php?NewsMode Cross-Site Scripting

PHPFreeNews 1.40 - NewsCategoryForm.php?NewsMode Cross-Site Scripting source: https://www.securityfocus.com/bid/14590/info PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

ECW Shop 6.0.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14578/info ECW Shop is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. This type of exploitation could allow for theft of cookie-based authentication credentials; other attacks are...

My Image Gallery 1.4.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14570/info My Image Gallery is prone to multiple cross-site scripting vulnerabilities due to improper sanitization of user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into the Web browser of an unsuspecting...

Soft4e ECW-Shop 6.0.2 - 'index.php' HTML Injection

source: https://www.securityfocus.com/bid/14579/info ECW Shop is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

VegaDNS 0.8.1/0.9.8/0.9.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14538/info VegaDNS is vulnerable to cross-site scripting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

FunkBoard 0.66 - profile.php Multiple Cross-Site Scripting Vulnerabilities

FunkBoard 0.66 - profile.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

FunkBoard 0.66 - reply.php Multiple Cross-Site Scripting Vulnerabilities

FunkBoard 0.66 - reply.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting

Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Dvbbs 7.1/8.2 - 'dispuser.asp?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in th...

Invision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site Scripting

source: https://www.securityfocus.com/bid/14492/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting

source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to inject html and script code into the Web...

Calendar Express 2.2 - search.php Cross-Site Scripting

Calendar Express 2.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14505/info Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting

Chipmunk CMS 1.3 - Fontcolor Cross-Site Scripting source: https://www.securityfocus.com/bid/14506/info Chipmunk CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

Dvbbs 7.18.2 - dispuser.asp?name Cross-Site Scripting

Dvbbs 7.18.2 - dispuser.asp?name Cross-Site Scripting source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Gravity Board X 1.1 DeleteThread.PHP Cross-Site Scripting Vulnerability

Gravity Board X 1.1 DeleteThread.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/14499/info Gravity Board X GBX is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitiz...

FunkBoard 0.66 - register.php Multiple Cross-Site Scripting Vulnerabilities

FunkBoard 0.66 - register.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

FunkBoard 0.66 - 'reply.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...