Jira 4.0.1 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/42025/info Jira is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to obtain sensitive...

Jira 4.0.1 - Cross-Site Scripting Information Disclosure

Jira 4.0.1 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/42025/info Jira is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input...

Impact Software AdPeeps - Cross-Site Scripting HTML Injection

Impact Software AdPeeps - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied inp...

Impact Software AdPeeps - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

Joomla! Component FreiChat 1.0/2.x - HTML Injection

source: https://www.securityfocus.com/bid/41961/info Joomla! FreiChat component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script...

Sourcefabric Campsite Articles - HTML Injection

Sourcefabric Campsite Articles - HTML Injection source: https://www.securityfocus.com/bid/41780/info Sourcefabric Campsite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits wi...

Sourcefabric Campsite Articles - HTML Injection

source: https://www.securityfocus.com/bid/41780/info Sourcefabric Campsite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code ...

Joomla! Component Rapid-Recipe - HTML Injection

Joomla! Component Rapid-Recipe - HTML Injection source: https://www.securityfocus.com/bid/41531/info Joomla! Rapid-Recipe component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

Wiki Web Help 0.2.7 - Cross-Site Scripting HTML Injection

Wiki Web Help 0.2.7 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/41306/info Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

JForum 2.1.8 - 'bookmarks' Module Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/40600/info JForum is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run ...

osCommerce Local File Include and HTML Injection Vulnerabilities

osCommerce is prone to a local file-include vulnerability and an HTML- injection vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory- traversal strings to execute local files within the context of t...

60cycleCMS - 'select.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

PacketVideo Twonky Server 4.4.175.0.65 - Cross-Site Scripting HTML Injection

PacketVideo Twonky Server 4.4.175.0.65 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/41929/info Twonky Server is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input...

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection

source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in...

Multi Website 1.5 - search HTML Injection

Multi Website 1.5 - search HTML Injection source: https://www.securityfocus.com/bid/43245/info Multi Website is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Curverider Elgg 1.0 - Templates HTML Injection

source: https://www.securityfocus.com/bid/43871/info Elgg is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploits require the attacker be an authenticated user; this permission may be trivial ...

Google Chrome XSS Vulnerability

The host is installed with Google Chrome and is prone to XSS vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromexssvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Google Chrome XSS Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

ExpressionEngine 1.6 - Avtaar Name HTML Injection

source: https://www.securityfocus.com/bid/34193/info ExpressionEngine is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the contex...