W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

pecio CMS 2.0.5 - target Cross-Site Scripting

pecio CMS 2.0.5 - target Cross-Site Scripting source: https://www.securityfocus.com/bid/44304/info pecio cms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

Wiki Web Help <= 0.3.3 Authentication Bypass Vulnerability

Wiki Web Help is prone to an authentication bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

sNews 1.7 - 'snews.php' Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44169/info eXV2 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Lara Cross Site Request Forgery

Vulnerability ID: HTB22619 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlara.html Product: Lara Vendor: Geographical Media http://getlara.com/ Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions Vendor Notification: 27 September 2010 Vulnerability Type: CSRF Cross-Site...

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44066/info Ronny CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

XSS vulnerability in PluXml

Vulnerability ID: HTB22631 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpluxml.html Product: PluXml Vendor: PluXml Team http://pluxml.org/ Vulnerable Version: 5.0.1 and probably prior versions Vendor Notification: 29 September 2010 Vulnerability Type: Stored XSS Cross Site Scripti...

PluXml 5.0.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTM...

expression-xss.txt

=================================== Vulnerability ID: HTB22618 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinexpressioncms1.html Product: Expression Vendor: Backbone Technology http://www.backbonetechnology.com Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions...

Expression Cross Site Scripting

=================================== Vulnerability ID: HTB22618 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinexpressioncms1.html Product: Expression Vendor: Backbone Technology http://www.backbonetechnology.com Vulnerable Version: Current at 18.09.2010 and Probably Prior Versions...

OPEN IT OverLook 5 - title.php Cross-Site Scripting

OPEN IT OverLook 5 - title.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43872/info OverLook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Lantern CMS - '11-login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43865/info Lantern CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

OPEN IT OverLook 5 - 'title.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43872/info OverLook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

XSS vulnerability in Docebo Announcements

Vulnerability ID: HTB22612 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityindoceboannouncements.html Product: Docebo Vendor: Docebo http://www.docebo.org/ Vulnerable Version: 3.6.0.4 and probably prior versions Vendor Notification: 20 September 2010 Vulnerability Type: XSS Cross Site...

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting

SquirrelMail Virtual Keyboard Plugin - vkeyboard.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43749/info The Virtual Keyboard plugin for SquirrelMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (2)

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities 2 source: https://www.securityfocus.com/bid/41973/info Portili Personal and Team Wiki are prone to multiple security vulnerabilities. These vulnerabilities include a cross-site scripting vulnerability, an arbitrary-file-upload...

Docebo 3.6 - description Cross-Site Scripting

Docebo 3.6 - description Cross-Site Scripting source: https://www.securityfocus.com/bid/43721/info Docebo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Portili Personal and Team Wiki 1.14 - Multiple Vulnerabilities (2)

source: https://www.securityfocus.com/bid/41973/info Portili Personal and Team Wiki are prone to multiple security vulnerabilities. These vulnerabilities include a cross-site scripting vulnerability, an arbitrary-file-upload vulnerability, and multiple information-disclosure vulnerabilities...