bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability

bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities

Amiro.CMS 5.4 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/42430/info Amiro.CMS is prone to multiple input-validation vulnerabilities including multiple cross-site scripting issues, an HTML-injection issue, and an information-disclosure issue. An attacker...

Snitz Forums 2000 3.4.7 - pop_send_to_friend.asp?url Cross-Site Scripting

Snitz Forums 2000 3.4.7 - popsendtofriend.asp?url Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature 'ReqWebHelp/basic/searchView.jsp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting

IBM Rational RequisitePro 7.10 - ReqWeb Help Feature ReqWebHelpadvancedworkingSet.jsp?Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/36721/info IBM Rational RequisitePro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36674/info Eclipse BIRT Business Intelligence and Reporting Tools is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

AdaptBB 1.0 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Zainu 1.0 - searchSongKeyword Cross-Site Scripting

Zainu 1.0 - searchSongKeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/36701/info Zainu is prone to a cross-site scripting vulnerability in the Contact module because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection

Dream Poll 3.1 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/36663/info Dream Poll is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

AfterLogic WebMail Pro 4.7.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36605/info AfterLogic WebMail Pro is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

X-Cart Email Subscription - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36601/info X-Cart is prone to a cross-site scripting vulnerability in the email subscription component because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting

e107 0.7.x - CAPTCHA Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/36532/info e107 is prone to a security-bypass vulnerability and multiple cross-site scripting vulnerabilities. Successfully exploiting the security-bypass issue will allow an attacker to bypass the...

Activedition - activeditionaelogin.asp Multiple Cross-Site Scripting Vulnerabilities

Activedition - activeditionaelogin.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42164/info Activedition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage thes...

Activedition - '/activedition/aelogin.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42164/info Activedition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36513/info IBM Lotus Connections is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities

Juniper Junos 8.59.0 J-Web Interface - diagnose Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize...

Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36537/info Juniper Networks JUNOS is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data to J-Web Juniper Web Management. Attacker-supplied HTML or JavaScript code could ru...

Vastal I-Tech DVD Zone - view_mag.php SQL Injection

Vastal I-Tech DVD Zone - viewmag.php SQL Injection source: https://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities

Avaya Intuity Audix LX R1.1 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/36450/info Avaya Intuity Audix LX is prone to multiple remote vulnerabilities, including: 1. Multiple remote command-execution vulnerabilities 2. A cross-site request-forgery vulnerability 3. A...

RSSMediaScript - index.php Cross-Site Scripting

RSSMediaScript - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42421/info RSSMediaScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...