FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...

vTiger CRM 4.2 - SQL Injection

vTiger CRM 4.2 - SQL Injection source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HTML...

vTiger CRM 4.2 RSS Aggregation Module - Feed Cross-Site Scripting

source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HTML injection, cross-site scripting...

Tunez 1.21 - search.php?searchFor Cross-Site Scripting

Tunez 1.21 - search.php?searchFor Cross-Site Scripting source: https://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the S...

blogBuddies 0.3 - 'magpie_slashbox.php?rss_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15555/info blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

blogBuddies 0.3 - index.php?u Cross-Site Scripting

blogBuddies 0.3 - index.php?u Cross-Site Scripting source: https://www.securityfocus.com/bid/15555/info blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

PmWiki 2.0.x - Search Cross-Site Scripting

PmWiki 2.0.x - Search Cross-Site Scripting source: https://www.securityfocus.com/bid/15539/info PmWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

PmWiki 2.0.x - Search Cross-Site Scripting

source: https://www.securityfocus.com/bid/15539/info PmWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

PHPPost 1.0 - mail.php?user Cross-Site Scripting

PHPPost 1.0 - mail.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

Advanced Poll 2.0.22.0.3 - popup.php Cross-Site Scripting

Advanced Poll 2.0.22.0.3 - popup.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15506/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Advanced Poll 2.0.2/2.0.3 - 'popup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15506/info Advanced Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting use...

Ekinboard 1.0.3 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15447/info Ekinboard is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

SAP Web Application Server 6.x7.0 - Error Page Cross-Site Scripting

SAP Web Application Server 6.x7.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/15361/info SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

TikiWiki 1.9 - 'Tiki-view_forum_thread.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15371/info TikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

ICECast XSS

The remote server runs a version of ICECast which is as old as or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a resul...

vBulletin < 2.3.6, 3.0.x < 3.0.6 XSS Vulnerability

vBulletin is vulnerable to a cross-site scripting XSS issue, due to a failure of the application to properly sanitize user-supplied URI input. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...