4057 matches found
Cacti 'data_input.php' Cross Site Scripting Vulnerability
Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...
Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting
Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35124/info Vanilla is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...
Cacti 0.8.7 - data_input.php Cross-Site Scripting
Cacti 0.8.7 - datainput.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34991/info Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities
Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...
Dokeos <= 1.8.5 Multiple Remote Input Validation Vulnerabilities
Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Matt Wright FormMail HTTP Response Splitting and XSS Vulnerabilities
FormMail is prone to an HTTP response splitting vulnerability and multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
MagpieRSS 0.72 - Cross-Site Scripting HTML Injection
MagpieRSS 0.72 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...
VerliAdmin 0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities
VerliAdmin 0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34845/info VerliAdmin is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...
GlassFish Enterprise Server 2.1 - Admin Console configurationconfiguration.jsf URI Cross-Site Scripting
GlassFish Enterprise Server 2.1 - Admin Console configurationconfiguration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplie...
GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting
GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...
GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting
GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...
GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting
GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...
Woodstock 4.2 404 - Error Page Cross-Site Scripting
Woodstock 4.2 404 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/34829/info Woodstock is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...
MyBB 1.4.5 - Multiple Vulnerabilities
MyBB 1.4.5 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/34798/info MyBB is prone to multiple security vulnerabilities, including an HTML-injection issue and an unspecified issue. An attacker may leverage the HTML-injection issue to execute arbitrary script code in the...
MyBB 1.4.5 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/34798/info MyBB is prone to multiple security vulnerabilities, including an HTML-injection issue and an unspecified issue. An attacker may leverage the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Tiger DMS Login SQL Injection Vulnerability
Tiger DMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
TorrentTrader Classic 'msg' Parameter HTML Injection Vulnerability
TorrentTrader is prone to an HTML-injection vulnerability because it fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Drupal HTML Injection and Information Disclosure Vulnerabilities
Drupal is prone to a cross-site scripting vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Coppermine Photo Gallery 1.4.21 - css Cross-Site Scripting
Coppermine Photo Gallery 1.4.21 - css Cross-Site Scripting source: https://www.securityfocus.com/bid/34782/info Coppermine Photo Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Coppermine Photo Gallery 1.4.21 - 'css' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34782/info Coppermine Photo Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...