Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

CVE-2011-5070

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

DigitalHive 2.0 RC2 (base_include.php)File Include

DigitalHive 2.0 RC2 baseinclude.phpFile Include Source Code: http://www.comscripts.com/jump.php?action=script&id=1502 Vulnerable Code: include $GET"page"; Exploit : http://www.vicTim.com/Path/template/purpletech/baseinclude.php?page=s hell.txt? Discoverd By : Mahmoodali Conatact : mahk2000 at...