CartWIZ 1.10 - 'searchresults.asp' SKU Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13342/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - searchresults.asp Name Argument Cross-Site Scripting

CartWIZ 1.10 - searchresults.asp Name Argument Cross-Site Scripting source: https://www.securityfocus.com/bid/13343/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

CartWIZ 1.10 - searchresults.asp SKU Argument Cross-Site Scripting

CartWIZ 1.10 - searchresults.asp SKU Argument Cross-Site Scripting source: https://www.securityfocus.com/bid/13342/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...

phpBB 2.0.x - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13344/info phpBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

ProfitCode Software PayProCart 3.0 - AdminShop ModID Cross-Site Scripting

source: https://www.securityfocus.com/bid/13306/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

PHP Labs - '.proFile' File URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/13282/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's...

OneWorldStore - 'DisplayResults.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13251/info OneWorldStore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...

CityPost PHP LNKX 52.0 - message.php Cross-Site Scripting

CityPost PHP LNKX 52.0 - message.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php'...

CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13255/info CityPost PHP LNKX is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'message.php' script. An attacker may leverage this issue to have arbitrary...

Datenbank Module For phpBB - 'Remote mod.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13210/info A remote cross-site scripting vulnerability affects the datenbank module for phpbb. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. An attack...

Datenbank Module For phpBB - Remote mod.php Cross-Site Scripting

Datenbank Module For phpBB - Remote mod.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13210/info A remote cross-site scripting vulnerability affects the datenbank module for phpbb. This issue is due to a failure of the application to properly sanitize user-supplied input prio...

OneWorldStore - 'OWContactUs.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13184/info OneWorldStore is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...

SPHPBlog 0.4 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13170/info sphpBlog is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

phpBB Photo Album Module 2.0.53 - Album_Comment.php Cross-Site Scripting

phpBB Photo Album Module 2.0.53 - AlbumComment.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13158/info Photo Album is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

PHPBB2 Plus 1.5 - 'viewtopic.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13153/info phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...

Pinnacle Cart - index.php Cross-Site Scripting

Pinnacle Cart - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13138/info Pinnacle Cart is affected by a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Azerbaijan Development Group AzDGDatingPlatinum 1.1.0 - 'view.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13082/info AzDGDatingPlatinum is reported prone to multiple vulnerabilities. The following specific issues were identified: - Multiple SQL-injection vulnerabilities. These issues could permit remote attackers to pass malicious input to database queries,...

Active Auction House - WatchThisItem.asp Cross-Site Scripting

Active Auction House - WatchThisItem.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13039/info Active Auction House is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

PHP-Nuke 7.6 - banners.php Cross-Site Scripting

PHP-Nuke 7.6 - banners.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13026/info PHP-Nuke is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Horde Parent Frame Page Title XSS

The version of Horde installed on the remote host suffers from a cross-site scripting vulnerability in which an attacker can inject arbitrary HTML and script code via the page title of a parent frame, enabling him to steal cookie-based authentication credentials and perform other such attacks...