CVE-2010-0468

CVE-2010-0468 is a cross-site scripting (XSS) vulnerability in PaperThin CommonSpot Content Server, specifically in utilities/longproc.cfm, allowing remote attackers to inject arbitrary web script or HTML via the url parameter. The NVD entry describes the exposure but does not provide a documente...

CVE-2010-0468: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

CVE-2007-5932 describes multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0, allowing remote attackers to inject arbitrary script or HTML via unspecified fields related to the search function and advanced search function (and possibly other components). Th...

CVE-2007-5932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

Mambo < 4.6.2 includes/pdf.php dofreePDF Function Authentication Bypass

Binary data 3981.prm...

Information disclosure

Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors...

CVE-2006-3679

FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...

CVE-2006-3679

CVE-2006-3679 affects FatWire Content Server 5.5.0. The vulnerability allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process. According to the NVD entry, exploitation requires no authentication (netwo...

CVE-2006-3679: Undefined Security Weakness

FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...

[Full-disclosure] S21Sec-032-en: Vulnerability in Fatwire Content Server

S21Sec Advisory - Title: FatWire Content Server ID: S21SEC-032-en Severity: High - Administrative Privileges Escalation History: 31.May.2006 Vulnerability discovered 05.Jun.2006 Fixed patch available Scope: FatWire Content Server Portal Platforms: Any Author: Alberto Moro [email protected] URL:...

Mambo < 4.6.1 Login Function usercookie Cookie SQL Injection

Binary data 3656.prm...

CVE-2005-4574

Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...

CVE-2005-4575

PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...

CVE-2005-4575

PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...

CVE-2005-4574

Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...

CVE-2005-4574

CVE-2005-4574 is an XSS vulnerability in PaperThin CommonSpot Content Server 4.5 and earlier, triggered by the bNewWindow parameter in loader.cfm. Exploitation would allow remote attackers to inject arbitrary web script/HTML. Public references (NVD entry and related advisories) corroborate the is...

CVE-2005-4575

PaperThin CommonSpot Content Server 4.5 and earlier is affected. An attacker can trigger an error by passing an invalid errmsg parameter to loader.cfm with the url parameter set to email-login-info.cfm, causing the full filesystem pathname to be exposed in the error message. The vulnerability lea...