Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service

Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service source: https://www.securityfocus.com/bid/48642/info The Alice Modem is prone to a cross-site scripting vulnerability and a denial-of-service vulnerability because the device fails to properly handle user-supplied input. An attack...

Classified Script - c-BrowseClassified Cross-Site Scripting

Classified Script - c-BrowseClassified Cross-Site Scripting source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48546/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Paliz Portal - Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48559/info Paliz Portal is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-bas...

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48471/info Joomla! CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities

Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48482/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execut...

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48455/info Mambo CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary...

FanUpdate 3.0 - pageTitle Cross-Site Scripting

FanUpdate 3.0 - pageTitle Cross-Site Scripting source: https://www.securityfocus.com/bid/48392/info FanUpdate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...

FanUpdate 3.0 - 'pageTitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48392/info FanUpdate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Sitemagic CMS 2010.04.17 - SMExt Cross-Site Scripting

Sitemagic CMS 2010.04.17 - SMExt Cross-Site Scripting source: https://www.securityfocus.com/bid/48355/info Sitemagic CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

Sitemagic CMS 2010.04.17 - 'SMExt' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48355/info Sitemagic CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in t...

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmeventmon Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities

Cisco Unified Operations Manager 8.5 - iptmlogicalTopo.do Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-suppli...

Immophp 1.1.1 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/48341/info Immophp is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-base...

Cisco Unified Operations Manager 8.5 - 'iptm/advancedfind.do?extn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Immophp 1.1.1 - Cross-Site Scripting SQL Injection

Immophp 1.1.1 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/48341/info Immophp is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

miniblog 1.0 - Multiple Cross-Site Scripting Vulnerabilities

miniblog 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48281/info miniblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary...