3626 matches found
PHP Booking Calendar 'page_info_message' Parameter Cross Site Scripting Vulnerability
PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
Limny 3.0.1 - login.php Script Cross-Site Scripting
Limny 3.0.1 - login.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
StatIt 4 - 'statistik.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51280/info StatIt is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
TextPattern 4.4.1 - 'ddb' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51254/info TextPattern is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting
WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...
WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting
WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting source: https://www.securityfocus.com/bid/51241/info The Comment Rating plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could leverag...
WordPress Plugin Comment Rating 2.9.20 - 'path' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51241/info The Comment Rating plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an...
FuseTalk Forums 3.2 - 'windowed' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51227/info FuseTalk Forums is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting
WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
WordPress Plugin TheCartPress 1.6 - OptionsPostsList.php Cross-Site Scripting
WordPress Plugin TheCartPress 1.6 - OptionsPostsList.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51216/info The TheCartPress WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...
Neturf eCommerce Shopping Cart - searchFor Cross-Site Scripting
Neturf eCommerce Shopping Cart - searchFor Cross-Site Scripting source: https://www.securityfocus.com/bid/55667/info Neturf eCommerce Shopping Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
Pligg CMS 1.1.4 - 'SERVER[php_self]' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51274/info Pligg CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
CVE-2011-3839
Summary: CVE-2011-3839 affects Wuzly 2.0. The vulnerability is an authentication bypass in the administration functionality caused by setting the dXNlcm5hbWU cookie, enabling remote attackers to bypass authentication. The impact per the metrics is partial confidentiality, integrity, and availabil...
epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities
epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51149/info epesi BIM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...
WebSVN Multiple XSS Vulnerabilities (Dec 2011)
WebSVN is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...
Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities
Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51045/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...
Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51045/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...
Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities
Nagios XI - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful...
BrowserCRM 5.100.1 - clients.php Cross-Site Scripting
BrowserCRM 5.100.1 - clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting thes...
Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities
Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...