Cisco Unified Operations Manager 8.5 - iptmadvancedfind.do?extn Cross-Site Scripting

Cisco Unified Operations Manager 8.5 - iptmadvancedfind.do?extn Cross-Site Scripting source: https://www.securityfocus.com/bid/47901/info Cisco Unified Operations Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

miniblog 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48281/info miniblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Blog:CMS 4.2 - Multiple Cross-Site Scripting Vulnerabilities

Blog:CMS 4.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48132/info BLOG:CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

vBulletin vBExperience 3.0 'sortorder' Parameter XSS Vulnerability - Active Check

vBulletin vBExperience is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

allocPSA 'login/login.php' Cross Site Scripting Vulnerability

allocPSA is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...

ARSC Really Simple Chat 3.3-rc2 - Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48083/info ARSC Really Simple Chat is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitra...

Kentico CMS 5.5R2.23 - userContextMenu_Parameter Cross-Site Scripting

Kentico CMS 5.5R2.23 - userContextMenuParameter Cross-Site Scripting source: https://www.securityfocus.com/bid/48051/info Kentico CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

S9Y Serendipity Freetag-plugin 3.21 - index.php Cross-Site Scripting

S9Y Serendipity Freetag-plugin 3.21 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/48054/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue t...

S9Y Serendipity Freetag-plugin 3.21 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48054/info Serendipity Freetag-plugin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Kryn.cms 0.9 - _kurl Cross-Site Scripting

Kryn.cms 0.9 - kurl Cross-Site Scripting source: https://www.securityfocus.com/bid/47973/info Kryn.cms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser...

Ajax Chat 1.0 - 'ajax-chat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47953/info Ajax Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities

phpScheduleIt 1.2.12 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47951/info phpScheduleIt is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to...

PHP Calendar Basic 2.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47887/info PHP Calendar Basic is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user...

HTB22980: XSRF (CSRF) in Open Classifieds

Vulnerability ID: HTB22980 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenclassifieds.html Product: Open Classifieds Vendor: Open Classifieds Team http://www.open-classifieds.com/ Vulnerable Version: 1.7.1.1 and probably prior versions Vendor Notification: 28 April 2011 Vulnerability...

Open Classifieds 1.7.1.1 Cross Site Request Forgery

Vulnerability ID: HTB22980 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenclassifieds.html Product: Open Classifieds Vendor: Open Classifieds Team http://www.open-classifieds.com/ Vulnerable Version: 1.7.1.1 and probably prior versions Vendor Notification: 28 April 2011 Vulnerability...

DocMGR 1.1.2 - 'history.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47861/info DocMGR is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Argyle Social Cross Site Request Forgery

============================== Vulnerability ID: HTB22979 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinargylesocial.html Product: Argyle Social Vendor: Argyle Social http://argylesocial.com/ Vulnerable Version: Current at 26/04/2011 Vendor Notification:...

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47786/info poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Ampache 3.5.4 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47756/info Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Gelsheet 1.02 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47758/info Gelsheet is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...