Microsoft Internet Explorer 6 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/35570/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the context of the user running the...

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting source: https://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

phpMyAdmin 3.3.0 - 'db' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35531/info phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Cisco ASA Appliance 8.x - WebVPN DOM Wrapper Cross-Site Scripting

source: https://www.securityfocus.com/bid/35476/info Cisco ASA Adaptive Security Appliance is prone to a cross-site scripting vulnerability because its Web VPN fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracke...

Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracked by Sun Alert ID 258068. An attacker may leverage this issue to execute...

TemaTres Multiple XSS and SQL Injection Vulnerabilities

The host is running TemaTres and is prone to Multiple XSS and SQL Injection Vulnerabilities. OpenVAS Vulnerability Test $Id: gbtematresmultxssnsqlinjvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TemaTres Multiple XSS and SQL Injection Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009...

Cacti 'data_input.php' Cross Site Scripting Vulnerability

Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

Cacti 0.8.7 - data_input.php Cross-Site Scripting

Cacti 0.8.7 - datainput.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34991/info Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting

Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35124/info Vanilla is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities

Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Dokeos <= 1.8.5 Multiple Remote Input Validation Vulnerabilities

Dokeos is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, and cross-site request-forgery issues. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Matt Wright FormMail HTTP Response Splitting and XSS Vulnerabilities

FormMail is prone to an HTTP response splitting vulnerability and multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection

MagpieRSS 0.72 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/34891/info MagpieRSS is prone to multiple cross-site scripting issues and an HTML-injection issue because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...

GlassFish Enterprise Server 2.1 - Admin Console configurationconfiguration.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console configurationconfiguration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplie...

Woodstock 4.2 404 - Error Page Cross-Site Scripting

Woodstock 4.2 404 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/34829/info Woodstock is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console customMBeanscustomMBeans.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

VerliAdmin 0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities

VerliAdmin 0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34845/info VerliAdmin is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...

MyBB 1.4.5 - Multiple Vulnerabilities

MyBB 1.4.5 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/34798/info MyBB is prone to multiple security vulnerabilities, including an HTML-injection issue and an unspecified issue. An attacker may leverage the HTML-injection issue to execute arbitrary script code in the...