CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45819/info CompactCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied script code may be executed in the context of the affected site, potentially allowing the...

Joostina 1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45732/info Joostina is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

XSRF (CSRF) in PHP MicroCMS

Vulnerability ID: HTB22765 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpmicrocms.html Product: PHP MicroCMS Vendor: ApPHP http://www.apphp.com/ Vulnerable Version: 1.0.1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: CSRF Cross-Site Request Forger...

OpenEMR <= 3.2.0 Multiple Input Validation Vulnerabilities

OpenEMR is prone to SQL injection SQLi, HTML injection, and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Joomla! 1.0.x - ordering Cross-Site Scripting

Joomla! 1.0.x - ordering Cross-Site Scripting source: https://www.securityfocus.com/bid/45679/info The Joomla! Search component is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Lexmark X651de - Printer Ready Message Value HTML Injection

Lexmark X651de - Printer Ready Message Value HTML Injection source: https://www.securityfocus.com/bid/45688/info Lexmark Printer X651de is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successfu...

Appweb Web Server Cross Site Scripting Vulnerability

Appweb is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

Coppermine Photo Gallery 1.5.10 - 'searchnew.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Appweb Web Server 3.2.2-1 - Cross-Site Scripting

Appweb Web Server 3.2.2-1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/45568/info Appweb is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Social Share - search Cross-Site Scripting

Social Share - search Cross-Site Scripting source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Appweb Web Server 3.2.2-1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/45568/info Appweb is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

WordPress Plugin Accept Signups 0.1 - email Cross-Site Scripting

WordPress Plugin Accept Signups 0.1 - email Cross-Site Scripting source: https://www.securityfocus.com/bid/45548/info The Accept Signups Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Injader CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22745 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 20...

XSS vulnerability in Habari

Vulnerability ID: HTB22731 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by Vendor Risk...

OpenFiler - device Cross-Site Scripting

OpenFiler - device Cross-Site Scripting source: https://www.securityfocus.com/bid/45523/info Openfiler is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser...

Calibre 0.7.34 - Cross-Site Scripting Directory Traversal

Calibre 0.7.34 - Cross-Site Scripting Directory Traversal source: https://www.securityfocus.com/bid/45532/info Calibre is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues wi...

Habari Blog - Multiple Vulnerabilities

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45481/info Radius Manager is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Social Share - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45485/info Social Share is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45420/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...