Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/21717/info Oracle Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before returning it to the user. An attacker can exploit this issue to execute arbitrary HTML and script code in a userâ??s...

Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...

Xt-News 0.1 - show_news.php?id_news SQL Injection

Xt-News 0.1 - shownews.php?idnews SQL Injection source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker...

Calacode @Mail Webmail 4.51 - Filtering Engine HTML Injection

Calacode @Mail Webmail 4.51 - Filtering Engine HTML Injection source: https://www.securityfocus.com/bid/21708/info Calacode @Mail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary scrip...

Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21677/info Mini Web Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection

Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute...

GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities

GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include...

AnnonceScriptHP 2.0 - erreurinscription.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - erreurinscription.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - adminadmin_configAide.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - adminadminconfigAide.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

AnnonceScriptHP 2.0 - '/admin/admin_config/Aide.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - '/Templates/admin.dwt.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'erreurinscription.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

AnnonceScriptHP 2.0 - 'membre.dwt.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to ste...

Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

ProNews 1.5 - lire-avis.php?aa SQL Injection

ProNews 1.5 - lire-avis.php?aa SQL Injection source: https://www.securityfocus.com/bid/21516/info ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to...

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize...

AnnonceScriptHP 2.0 - membre.dwt.php?email Cross-Site Scripting

AnnonceScriptHP 2.0 - membre.dwt.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

cPanel 11 BoxTrapper - Manage.HTML Cross-Site Scripting

cPanel 11 BoxTrapper - Manage.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/21497/info cPanel BoxTrapper is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CuteNews 1.3.6 - 'result' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21403/info CuteNews is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context...