Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/34531/info Novell Teaming is prone to a user-enumeration weakness and multiple cross-site scripting vulnerabilities. A remote attacker can exploit the user-enumeration weakness to enumerate valid usernames and then perform brute-force attacks; other attac...

Banshee 1.4.2 DAAP Extension - '/apps/web/vs_diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Banshee 1.4.2 DAAP Extension - appswebvs_diag.cgi Cross-Site Scripting

Banshee 1.4.2 DAAP Extension - appswebvsdiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/34507/info Banshee DAAP Extension is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Apache mod_perl 'Apache::Status' and 'Apache2::Status' XSS Vulnerability

According to its version number, the remote version of the Apache modperl module is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Horde XSS Filter Cross Site Scripting Vulnerability

Horde is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal...

Horde Turba HTML Injection Vulnerability (Apr 2009)

Horde Turba is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Horde Turba 'services/obrowser/index.php' HTML Injection Vulnerability

Horde Turba is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to...

Horde Products Local File Include and Cross Site Scripting Vulnerabilities

Horde products are prone to a local file-include vulnerability and a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...

Horde Multiple Vulnerabilities (Apr 2009)

Horde is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Turnkey eBook Store <= 1.1 XSS Vulnerability - Active Check

Turnkey eBook Store is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP Business Objects Crystal Reports 7-10 - viewreport.asp Cross-Site Scripting

SAP Business Objects Crystal Reports 7-10 - viewreport.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/34341/info SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the...

BlogEngine.NET 1.4 - search.aspx Cross-Site Scripting

BlogEngine.NET 1.4 - search.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/34227/info BlogEngine.NET is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34227/info BlogEngine.NET is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based...

Turnkey eBook Store 1.1 - keywords Cross-Site Scripting

Turnkey eBook Store 1.1 - keywords Cross-Site Scripting source: https://www.securityfocus.com/bid/34324/info Turnkey eBook Store is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34153/info Sun Java System Calendar Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...

Cisco ASA Appliance 7.x/8.0 WebVPN - Cross-Site Scripting

source: https://www.securityfocus.com/bid/34307/info Cisco ASA is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication...

ExpressionEngine 1.6 - Avtaar Name HTML Injection

ExpressionEngine 1.6 - Avtaar Name HTML Injection source: https://www.securityfocus.com/bid/34193/info ExpressionEngine is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...

phpCommunity2 Multiple Vulnerabilities (Mar 2009) - Active Check

phpCommunity2 is prone to multiple input validation vulnerabilities, including multiple directory traversal issues and SQL-injection issues, and a cross-site scripting issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

TikiWiki 2.2/3.0 - 'tiki-galleries.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34105/info TikiWiki is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication...

TikiWiki 2.23.0 - tiki-list_file_gallery.php Cross-Site Scripting

TikiWiki 2.23.0 - tiki-listfilegallery.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34106/info TikiWiki is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...