Red Hat OpenJDK IcedTea6 ClassLoader Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Java OpenJDK. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the IcedTea.so component. Wh...

ImpressCMS 1.2.x - quicksearch_ContentContent HTML Injection

ImpressCMS 1.2.x - quicksearchContentContent HTML Injection source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...

ImpressCMS 1.2.x - 'quicksearch_ContentContent' HTML Injection

source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

WAP form content can be leaked to other sites

When accepting user input in form fields on a WAP page, WML requires that the input contents are remembered, and used to populate every further input sharing the same name. This should continue as long as the user continues to click links known as a WAP session, even populating similarly named...

Webmedia Explorer HTML Injection Vulnerability

Webmedia Explorer is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentiall...

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

Collabtive Cross Site Scripting and HTML Injection Vulnerabilities

Collabtive is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the...

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44066/info Ronny CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

Micro CMS 1.0 - name HTML Injection (1)

Micro CMS 1.0 - name HTML Injection 1 source: https://www.securityfocus.com/bid/43556/info Micro CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

AContent 1.0 - Cross-Site Scripting HTML Injection

AContent 1.0 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/43238/info AContent is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

Mantis Multiple HTML Injection Vulnerabilities

Mantis is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to r...

WebsiteKit Gbplus - Name Body HTML Injection

WebsiteKit Gbplus - Name Body HTML Injection source: https://www.securityfocus.com/bid/42842/info Gbplus is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Syntax Highlighter 3.0.83 - 'index.html' HTML Injection

source: https://www.securityfocus.com/bid/42572/info Syntax Highlighter is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Muraus Open Blog - Multiple HTML Injection Vulnerabilities

Muraus Open Blog - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42255/info Tomaž Muraus Open Blog is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generat...

Hulihan Applications Amethyst 0.1.5 - Multiple HTML Injection Vulnerabilities

Hulihan Applications Amethyst 0.1.5 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42253/info Hulihan Applications Amethyst is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using ...

DiamondList - '/user/main/update_settings?setting[site_title]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42252/info DiamondList is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Hulihan Applications Amethyst 0.1.5 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42253/info Hulihan Applications Amethyst is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code...