CKEditor - posteddata.php Cross-Site Scripting

CKEditor - posteddata.php Cross-Site Scripting source: https://www.securityfocus.com/bid/58045/info CKEditor is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Squirrelcart - table Cross-Site Scripting

Squirrelcart - table Cross-Site Scripting source: https://www.securityfocus.com/bid/58025/info Squirrelcart is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities

MIMEsweeper For SMTP - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58012/info MIMEsweeper for SMTP is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execu...

RaidSonic IB-NAS5220 and IB-NAS4220-B Multiple Security Vulnerabilities

RaidSonic IB-NAS5220 and IB-NAS422-B are prone to multiple security vulnerabilities, including: 1. An authentication-bypass vulnerability 2. An HTML-injection vulnerability 3. A command-injection vulnerability The attacker may leverage these issues to bypass certain security restrictions and...

Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/57949/info The Dell SonicWALL Scrutinizer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

WordPress Theme Pinboard - 'tab' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57873/info The Pinboard theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

WordPress Plugin CommentLuv - _ajax_nonce Cross-Site Scripting

WordPress Plugin CommentLuv - ajaxnonce Cross-Site Scripting source: https://www.securityfocus.com/bid/57771/info The CommentLuv plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue...

WordPress Plugin CommentLuv - '_ajax_nonce' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57771/info The CommentLuv plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

gpEasy CMS - section Cross-Site Scripting

gpEasy CMS - section Cross-Site Scripting source: https://www.securityfocus.com/bid/57522/info gpEasy CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Theme Chocolate WP - Multiple Vulnerabilities

WordPress Theme Chocolate WP - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/57541/info The Chocolate WP Theme for WordPress is prone to multiple security vulnerabilities. An attacker may leverage these issues to cause denial-of-service conditions, upload arbitrary files to t...

WordPress Theme Chocolate WP - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/57541/info The Chocolate WP Theme for WordPress is prone to multiple security vulnerabilities. An attacker may leverage these issues to cause denial-of-service conditions, upload arbitrary files to the affected computer, or execute arbitrary script code i...

Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities

Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57514/info Perforce P4Web is prone to multiple cross site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issue...

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

Apache OFBiz 10.4.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57463/info Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting...

TinyBrowser - tinybrowser.php Directory Listing

TinyBrowser - tinybrowser.php Directory Listing source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an...

TinyBrowser /tiny_mce/plugins/tinybrowser/upload.php type Parameter XSS

TinyBrowser /tinymce/plugins/tinybrowser/upload.php type Parameter XSS. Webapps exploit for php platform source: http://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to...

tinybrowser - 'type' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

TinyBrowser - 'edit.php' Directory Listing

source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

WordPress NextGEN Gallery Plugin - Cross Site Scripting

WordPress NextGEN Gallery plugin's "test-head" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...