MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

DCP-Portal 3.7/4.x/5.x/6.x - 'forums.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

DCP-Portal 3.7/4.x/5.x/6.x - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

MPCS 0.2 - comment.php Cross-Site Scripting

MPCS 0.2 - comment.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18470/info MPCS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Bitweaver 1.11.2 - Title HTML Injection

Bitweaver 1.11.2 - Title HTML Injection source: https://www.securityfocus.com/bid/16973/info The bitweaver application is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HT...

MPCS 0.2 - 'comment.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18470/info MPCS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Bitweaver 1.1/1.2 - 'Title' HTML Injection

source: https://www.securityfocus.com/bid/16973/info The bitweaver application is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in...

VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting

VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Easy Forum 2.5 - New User Image File HTML Injection

Easy Forum 2.5 - New User Image File HTML Injection source: https://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...

VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting

VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

phpArcadeScript 2.0 tellafriend.php gamename Parameter XSS

phpArcadeScript 2.0 tellafriend.php gamename Parameter XSS. CVE-2006-1082. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16957/info phpArcadeScript is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of...

vBulletin 3.03.5 - profile.php?Email HTML Injection

vBulletin 3.03.5 - profile.php?Email HTML Injection source: https://www.securityfocus.com/bid/16919/info vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...

vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)

Exploit for unknown platform in category web applications ================================================================ vuBB agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV1 $ARGV1 = '1'; my $path = $ARGV0 . '/index.php'; my $user = $ARGV1; userid to jack my $uname = $ARGV2; m...

QwikiWiki 1.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16874/info QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16879/info EJ3 TOPo is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

n8cms 1.11.2 - mailto.php?userid Cross-Site Scripting

n8cms 1.11.2 - mailto.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation...

Woltlab Burning Board 1.1.12.x - galerie_index.php?Username Cross-Site Scripting

Woltlab Burning Board 1.1.12.x - galerieindex.php?Username Cross-Site Scripting source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An...

Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject arbitrary PHP code and execute it ...