EasyImageCatalogue 1.31 - 'describe.php?d' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

EasyImageCatalogue 1.31 - 'thumber.php?dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker...

Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/28222/info Cisco User-Changeable Password UCP is prone to multiple remote vulnerabilities, including cross-site scripting and buffer-overflow vulnerabilities. Exploiting the cross-site scripting issues may help the attacker steal cookie-based authenticati...

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting

EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

EncapsGallery 1.11.2 - catalog_watermark.php?file Cross-Site Scripting

EncapsGallery 1.11.2 - catalogwatermark.php?file Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

F5 BIG-IP 9.4.3 - Web Management Interface Console HTML Injection

F5 BIG-IP 9.4.3 - Web Management Interface Console HTML Injection source: https://www.securityfocus.com/bid/28151/info F5 BIG-IP Web Management Interface is prone to a HTML-injection vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may...

Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access

source: https://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input. Attackers can exploit these...

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting source: https://www.securityfocus.com/bid/28139/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28139/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/28116/info Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting

Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting source: https://www.securityfocus.com/bid/28116/info Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issu...

MG2 - list Cross-Site Scripting

MG2 - list Cross-Site Scripting source: https://www.securityfocus.com/bid/28098/info MG2 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Flyspray 0.9.9 - Information Disclosure/HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/28076/info Flyspray is prone to an information-disclosure issue, an HTML-injection issue, and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues determine valid...

Simple PHP Scripts Gallery 0.x - index.php Cross-Site Scripting

Simple PHP Scripts Gallery 0.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

Simple PHP Scripts Gallery 0.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

XRms 1.99.2 - CRM 'msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28041/info XRMS CRM is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Juniper Networks Secure Access 2000 - rdremediate.cgi Cross-Site Scripting

Juniper Networks Secure Access 2000 - rdremediate.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/28034/info Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverag...

Juniper Networks Secure Access 2000 - 'rdremediate.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28034/info Juniper Networks Secure Access 2000 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...