Multiple vulnerabilities in TCExam

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in TCExam, which can be exploited to perform Cross-Site Scripting XSS and SQL injection attacks. 1 SQL Injection in TCExam: CVE-2012-4601 1.1 Input passed via the "usergroups" POST parameter to /admin/code/tceedittest.php ...

FreeBSD : Dokuwiki -- XSS vulnerability (2fe4b57f-d110-11e1-ac76-10bf48230856)

Secunia Research reports : Secunia Research has discovered a vulnerability in DokuWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the 'ns' POST parameter in lib/exe/ajax.php when 'call' is set to 'medialist' and 'do' is set to 'media' is n...

FreeBSD : typo3 -- XSS Vulnerability in TYPO3 Core (c28ee9cd-916e-4dcf-8ed3-e97e5846db6c)

Typo3 Security Report TYPO3-CORE-SA-2012-003 : TYPO3 bundles and uses an external JavaScript and Flash Upload Library called swfupload. TYPO3 can be configured to use this Flash uploader. Input passed via the 'movieName' parameter to swfupload.swf is not properly sanitised before being used in a...

Multiple Cross-Site Scripting (XSS) in Kajona

High-Tech Bridge Security Research Lab has discovered multiple Cross-Site Scripting XSS vulnerabilities in Kajona. 1 Multiple Cross-Site Scripting XSS in Kajona: CVE-2012-3805 1.1 Input passed via the "absendername", "absenderemail" and "absendernachricht" GET parameters to /index.php when "page"...

Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability

This host is running Support Incident Tracker and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsitidparamxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability Authors: Rachana Shetty Copyright: Copyright...

backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability

Exploit for php platform in category web applications backupDB v1.2.7a onlyDB Remote XSS Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.2.7a-201108021626 Summary: backupDB is a PHP script that backs up MySQL tables and databases to a file...

PivotX -- 'ajaxhelper.php' Cross Site Scripting Vulnerability

High-Tech Bridge reports: Input passed via the "file" GET parameter to /pivotx/ajaxhelper.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in administrator's browser session in context of the affected website...

Multiple vulnerabilities in Pligg CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pligg CMS , which can be exploited to perform Cross-Site Scripting XSS and Local File Inclusion attacks. 1 Multiple Cross-Site Scripting XSS in Pligg CMS: CVE-2012-2436 1.1 Input passed via the arbitrary any GET...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

Multiple vulnerabilities in LEPTON

Advisory ID: HTB23072 Product: LEPTON Vendor: LEPTON Project Vulnerable Versions: 1.1.3 and probably prior Tested Version: 1.1.3 Vendor Notification: 25 January 2012 Vendor Patch: 4 February 2012 Public Disclosure: 15 February 2012 Vulnerability Type: Local File Inclusion, SQL Injection, Cross Si...

Zoho ManageEngine Applications Manager Multiple XSS and SQL Injection Vulnerabilities

This host is running Zoho ManageEngine Applications Manager and is prone to multiple cross site scripting and SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineapplicationsmanagermultxssnsqlinjvuln.nasl 5912 2017-04-10 09:01:51Z teissa $ Zoho ManageEngine Applications...

SiT! Support Incident Tracker 3.64 XSS / CSRF / SQL Injection

Advisory Details: High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SiT! Support Incident Tracker, which can be exploited to perform SQL injection, cross-site scripting, cross-site request forgery attacks. 1 Input passed via the "start" GET parameter to...

Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)

The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting XSS vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this...

IBM Web Experience Factory Multiple Cross Site Scripting Vulnerabilities

This host is installed with IBM Web Experience Factory and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmwebexperiencefactoryxssvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IBM Web Experience Factory Multiple Cross Site Scripting Vulnerabilities...

SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities

The host is running SQLiteManager and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagermultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities Authors: Rachana Shetty...

Multiple vulnerabilities in OSclass

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OSclass, which can be exploited to perform cross-site scripting and sql injection attacks. 1 SQL Injection in OSclass: CVE-2012-0973. Input passed via the "sCategory" GET parameter to /index.php is not properly...

phpMyAdmin Setup '$host' Variable Cross Site Scripting Vulnerability

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability

This host is running APC PowerChute Business Edition and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpowerchutebusinessedtnxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability...

Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability (Windows)

This host is installed with Adobe Flex SDK and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeflexsdkswffilesxssvulnwin.nasl 5367 2017-02-20 14:16:52Z cfi $ Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability Windows Authors: Madhuri D...

Multiple XSS vulnerabilities in XOOPS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in XOOPS, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Multiple Cross-Site Scripting XSS in XOOPS: CVE-2012-0984 1.1 Input passed via the "touserid" POST parameter to /modules/pm/pmlite.php ...