5 matches found
CVE-2010-4882
Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...
CVE-2010-4882
Auto CMS 1.6 is affected by a cross-site scripting (XSS) vulnerability in autocms.php, exploitable via the sitetitle parameter. The root cause is insufficient input sanitization of sitetitle, allowing remote attackers to inject arbitrary HTML/JavaScript into the user’s browser. The CVE entry CVE-...
CVE-2010-4882: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter...
PT-2011-1817
Name of the Vulnerable Software and Affected Versions Auto CMS version 1.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the sitetitle parameter in the autocms.php file. Recommendations For Auto CMS...
Auto CMS 1.6 - autocms.php Cross-Site Scripting
Auto CMS 1.6 - autocms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42764/info Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...