x10 MP3 Automatic Search Engine 1.6.5 - '/includes/video_ad.php?pic_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

x10 MP3 Automatic Search Engine 1.6.5b - 'lyrics.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

WebStatCaffe - statpageviewerschart.php?date Cross-Site Scripting

WebStatCaffe - statpageviewerschart.php?date Cross-Site Scripting source: https://www.securityfocus.com/bid/43339/info Gonafish WebStatCaffe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

x10 MP3 Automatic Search Engine 1.6.5b - info.php?name Cross-Site Scripting

x10 MP3 Automatic Search Engine 1.6.5b - info.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

WebStatCaffe - '/stat/referer.php?date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43339/info Gonafish WebStatCaffe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Smart ASP Survey - catid SQL Injection

Smart ASP Survey - catid SQL Injection source: https://www.securityfocus.com/bid/43370/info Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the vulnerability could allow an attacker to steal cookie-based...

Free Arcade Script 1.0 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Auction RSS Content Script - search.php?id Cross-Site Scripting

Auction RSS Content Script - search.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/44267/info JCE-Tech Auction RSS Content Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverag...

VideoGirls - view.php?p Cross-Site Scripting

VideoGirls - view.php?p Cross-Site Scripting source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...

JCE-Tech PHP Video Script - index.php Cross-Site Scripting

JCE-Tech PHP Video Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...

ViewVC < 1.0.9 Multiple Vulnerabilities

ViewVC is prone multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100262...

JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

VideoGirls - 'profile.php?profile_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection

source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in...

JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically...

HotScripts Type PHP Clone Script - lostpassword.php?msg Cross-Site Scripting

HotScripts Type PHP Clone Script - lostpassword.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/43519/info Hotscripts Type PHP Clone Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker ma...

HotScripts Type PHP Clone Script - 'feedback.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43519/info Hotscripts Type PHP Clone Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Paypal Shopping Cart Script - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43471/info Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

EZArticles - articles.php Cross-Site Scripting

EZArticles - articles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43483/info EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...