XHP CMS 0.5.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19948/info XHP CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch other attacks...

Sage 1.3.x - IMG Element Input Validation

Sage 1.3.x - IMG Element Input Validation source: https://www.securityfocus.com/bid/21164/info The application is prone to an input-validation vulnerability that allows malicious HTML and script code to be injected before it is used in dynamically generated content. Attacker-supplied HTML and...

Vikingboard 0.1b - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

AckerTodo 4.0 - index.php Cross-Site Scripting

AckerTodo 4.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19894/info AckerTodo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based...

SoftBB 0.1 - Page Cross-Site Scripting

SoftBB 0.1 - Page Cross-Site Scripting source: https://www.securityfocus.com/bid/19847/info SoftBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...

HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

VisualShapers EZContents 2.0.3 - Loginreq2.php Cross-Site Scripting

VisualShapers EZContents 2.0.3 - Loginreq2.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19780/info ezContents is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this...

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...

MyBulletinBoard 1.x Functions_Post.PHP Cross-Site Scripting Vulnerability

MyBulletinBoard 1.x FunctionsPost.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/19770/info MyBulletinBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker ma...

HLstats 1.34 - 'hlstats.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other...

Apache 1.3.35/2.0.58/2.2.2 - Arbitrary HTTP Request Headers Security

source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launch other attacks. var req:LoadVars=new LoadVars;...

Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security

Apache 1.3.352.0.582.2.2 - Arbitrary HTTP Request Headers Security source: https://www.securityfocus.com/bid/19661/info Apache HTTP server is prone to a security weakness related to HTTP request headers. An attacker may exploit this issue to steal cookie-based authentication credentials and launc...

cPanel 10.x - 'dohtaccess.html?dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities

DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in...

DieselScripts DieselPay - index.php Cross-Site Scripting

DieselScripts DieselPay - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19623/info DieselPay is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

cPanel 10.x - 'editit.html?File' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19624/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

DieselScripts Diesel Paid Mail - 'Getad.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19646/info Paid Mail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the contex...

vBulletin 3.0.14 - global.php Encoded Cross-Site Scripting

vBulletin 3.0.14 - global.php Encoded Cross-Site Scripting source: https://www.securityfocus.com/bid/19358/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

VWar 1.x - war.php Multiple SQL Injections

VWar 1.x - war.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied...

Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the directory-traversal issue to retrieve arbitrary files...