Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31107/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31110/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

phpAdultSite CMS - results_per_page Cross-Site Scripting

phpAdultSite CMS - resultsperpage Cross-Site Scripting source: https://www.securityfocus.com/bid/31057/info phpAdultSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

XRms 1.99.2 - 'login.php?target' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to...

IDevSpot BizDirectory 2.04 - page Cross-Site Scripting

IDevSpot BizDirectory 2.04 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

GenPortal - buscarCat.php Cross-Site Scripting

GenPortal - buscarCat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...

AbleSpace 1.0 - adv_cat.php Cross-Site Scripting

AbleSpace 1.0 - advcat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30864/info AbleSpace is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code ...

AbleSpace 1.0 - 'adv_cat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30864/info AbleSpace is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

MatterDaddy Market 1.1 - login.php Cross-Site Scripting

MatterDaddy Market 1.1 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30848/info MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting

Smart Survey 1.0 - surveyresults.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Educe ASP Search Engine 1.5.6 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30849/info ASP Search Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Smart Survey 1.0 - 'surveyresults.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30841/info Smart Survey is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a...

PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting

PicturesPro Photo Cart 3.9 - Search Cross-Site Scripting source: https://www.securityfocus.com/bid/30798/info Photo Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary...

Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/30748/info Vanilla is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...

AWStats 6.8 - AWStats.pl Cross-Site Scripting

AWStats 6.8 - AWStats.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/30730/info AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30735/info Ovidentia is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...