Iatek PortalApp 3.3/4.0 - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41224/info Iatek PortalApp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Kryn.cms 6.0 - Cross-Site Request Forgery / HTML Injection

source: https://www.securityfocus.com/bid/41229/info Kryn.cms is prone to a cross-site request-forgery vulnerability and an HTML-injection vulnerability. Exploiting these issues may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected...

Ceica-GW - login.php Cross-Site Scripting

Ceica-GW - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40917/info Ceica-GW is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Linksys WAP54Gv3 Wireless Router - debug.cgi Cross-Site Scripting

Linksys WAP54Gv3 Wireless Router - debug.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/41061/info Linksys WAP54Gv3 Wireless Router is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit th...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22420 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site Scripti...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

SoftComplex PHP Event Calendar 1.5 - Multiple Remote Vulnerabilities

SoftComplex PHP Event Calendar 1.5 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/41043/info SoftComplex PHP Event Calendar is prone to multiple remote security vulnerabilities including cross-site scripting, HTML-injection, directory-traversal, and cross-site...

SoftComplex PHP Event Calendar 1.5 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/41043/info SoftComplex PHP Event Calendar is prone to multiple remote security vulnerabilities including cross-site scripting, HTML-injection, directory-traversal, and cross-site request-forgery issues. Attackers can exploit these issues to obtain sensiti...

Sigmer Technologies Scribe CMS - 'copy_folder.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41000/info Sigmer Technologies Scribe CMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/41030/info IBM WebSphere ILOG JRules is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Jamroom 4.0.2/4.1.x - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

IBM Websphere ILOG JRules 6.7 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/41030/info IBM WebSphere ILOG JRules is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

VideoWhisper PHP 2 Way Video Chat - 'r' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40832/info VideoWhisper PHP 2 Way Video Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this vulnerability could allow an attacker to execute arbitrary script code in the...

PhreeBooks Multiple HTML-Injection and Local File Include Vulnerabilities

PhreeBooks is prone to multiple local file-include vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerabilities using directory-traversal strings to view files and execute loca...

PhreeBooks <= 2.0 Multiple HTML Injection and LFI Vulnerabilities - Active Check

PhreeBooks is prone to multiple local file include LFI vulnerabilities and multiple HTML injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

XSRF &#40;CSRF&#41; in CuteSITE CMS

Vulnerability ID: HTB22395 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincutesitecms.html Product: CuteSITE CMS Vendor: AMT Company Vulnerable Version: 1.5.0 and Probably Prior Versions Vendor Notification: 20 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed,...

JForum 2.1.8 - Username Cross-Site Scripting

JForum 2.1.8 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/40880/info JForum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue...

WordPress Plugin Gigya Socialize 1.0/1.1.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/40582/info The Gigya Socialize Plugin for Wordpress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

PHP City Portal 1.3 - cms_data.php Cross-Site Scripting

PHP City Portal 1.3 - cmsdata.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40532/info PHP City Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...