HTB22880: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22880 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop1.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

Wikiwig 5.01 - Cross-Site Scripting HTML Injection

Wikiwig 5.01 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/46888/info Wikiwig is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated...

Cosmoshop 10.05.00 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/46828/info CosmoShop is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

HTB22878: XSS vulnerability in CosmoShop

Vulnerability ID: HTB22878 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincosmoshop.html Product: CosmoShop Vendor: Zaunz Publishing GmbH http://www.cosmoshop.de/ Vulnerable Version: ePRO V10.05.00 Vendor Notification: 24 February 2011 Vulnerability Type: Stored XSS Cross Site...

WordPress Plugin Lazyest Gallery 1.0.26 - image Cross-Site Scripting

WordPress Plugin Lazyest Gallery 1.0.26 - image Cross-Site Scripting source: https://www.securityfocus.com/bid/46823/info The Lazyest Gallery WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

PhotoSmash 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22867 Reference: http://www.htbridge.ch/advisory/xssinphotosmashwordpressplugin.html Product: PhotoSmash wordpress plugin Vendor: Byron Bennett http://smashly.net/ Vulnerable Version: 1.0.1 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripting...

Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin 1 Flash Gallery 0.2.5 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/46783/info 1 Flash Gallery is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify...

WordPress Plugin PhotoSmash Galleries 1.0.x - 'action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46782/info The PhotoSmash Galleries WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Kodak InSite 5.5.2 - '/Troubleshooting/DiagnosticReport.asp?HeaderWarning' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46762/info Kodak InSite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

Kodak InSite 5.5.2 - Pageslogin.aspx?Language Cross-Site Scripting

Kodak InSite 5.5.2 - Pageslogin.aspx?Language Cross-Site Scripting source: https://www.securityfocus.com/bid/46762/info Kodak InSite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

Kodak InSite 5.5.2 - TroubleshootingDiagnosticReport.asp?HeaderWarning Cross-Site Scripting

Kodak InSite 5.5.2 - TroubleshootingDiagnosticReport.asp?HeaderWarning Cross-Site Scripting source: https://www.securityfocus.com/bid/46762/info Kodak InSite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may levera...

Lms Web Ensino - Multiple Input Validation Vulnerabilities

Lms Web Ensino - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/46829/info LMS Web Ensino is prone to the following input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A cross-site...

phpWebSite 'local' Parameter Cross Site Scripting Vulnerability

phpWebSite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

HTB22863: XSS vulnerability in xtcModified

Vulnerability ID: HTB22863 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinxtcmodified.html Product: xtcModified Vendor: xtcModified Team http://www.xtc-modified.org/ Vulnerable Version: 1.05 and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: XSS...

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46771/info Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Support Incident Tracker (SiT!) 3.62 - Multiple Cross-Site Scripting Vulnerabilities

Support Incident Tracker SiT! 3.62 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46671/info Support Incident Tracker SiT! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker ma...

xtcModified 1.05 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities

xtcModified 1.05 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46681/info xtcModified is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful...

SnapProof - 'retPageID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46622/info SnapProof is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

SnapProof - retPageID Cross-Site Scripting

SnapProof - retPageID Cross-Site Scripting source: https://www.securityfocus.com/bid/46622/info SnapProof is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...