Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities

Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46385/info Photopad is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Gollos 2.8 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46379/info Gollos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Photopad 1.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46385/info Photopad is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

TaskFreak! <= 0.6.4 Multiple XSS Vulnerabilities

TaskFreak! is prone to multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

RunCMS 2.2.2 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2....

Dokeos 1.8.6 2 - style Cross-Site Scripting

Dokeos 1.8.6 2 - style Cross-Site Scripting source: https://www.securityfocus.com/bid/46370/info Dokeos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

TaskFreak! 0.6.4 - print_list.php Multiple Cross-Site Scripting Vulnerabilities

TaskFreak! 0.6.4 - printlist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46350/info TaskFreak! is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

Dokeos 1.8.6 2 - 'style' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46370/info Dokeos is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question

ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question source: https://www.securityfocus.com/bid/46331/info ManageEngine ADSelfService Plus is prone to multiple vulnerabilities, including multiple security-bypass and cross-site scripting vulnerabilities. Attackers can exploit...

PHPXref 0.7 - 'nav.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in th...

HTB22813: XSS vulnerability in UMI.CMS

Vulnerability ID: HTB22813 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinumicms1.html Product: UMI.CMS Vendor: umisoft http://www.umi-cms.ru/ Vulnerable Version: 2.8.1.2 Vendor Notification: 25 January 2011 Vulnerability Type: Stored XSS Cross Site Scripting Risk level: Medium...

UMI.CMS 2.8.1.2 Cross Site Scripting

==================================== Vulnerability ID: HTB22813 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinumicms1.html Product: UMI.CMS Vendor: umisoft http://www.umi-cms.ru/ Vulnerable Version: 2.8.1.2 Vendor Notification: 25 January 2011 Vulnerability Type: Stored XSS Cross...

UMI.CMS 2.8.1.2 Cross Site Request Forgery

Vulnerability ID: HTB22812 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinumicms.html Product: UMI.CMS Vendor: umisoft http://www.umi-cms.ru/ Vulnerable Version: 2.8.1.2 Vendor Notification: 25 January 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tec...

CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46275/info CiviCRM is prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user...

Podcast Generator Local File Include and Cross Site Scripting Vulnerabilities

Podcast Generator is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files withi...

Podcast Generator 1.3 Cross Site Scripting

Vulnerability ID: HTB22802 Reference: http://www.htbridge.ch/advisory/xssinpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Moodle 'PHPCOVERAGE_HOME' Cross Site Scripting Vulnerability

Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross- site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker m...

TCExam 11.1.16 - user_password Cross-Site Scripting

TCExam 11.1.16 - userpassword Cross-Site Scripting source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

TCExam 11.1.16 - 'user_password' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

TinyWebGallery Cross Site Scripting and Local File Include Vulnerabilities

TinyWebGallery is prone to local file-include and cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. A remote attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in...