cPanel 10.8.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16482/info cPanel is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities

CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

SPIP 1.81.9 - index.php3 Cross-Site Scripting

SPIP 1.81.9 - index.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/16461/info SPIP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...

Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16439/info Cerberus Helpdesk is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Nuked-klaN 1.7 Index.PHP Cross-Site Scripting Vulnerability

Nuked-klaN 1.7 Index.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16424/info Nuked-klaN is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

PmWiki 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include vulnerability. Exploitation of this issue will result in...

pixelpostXSS.txt

New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...

[eVuln] Pixelpost Photoblog XSS Vulnerability

New eVuln Advisory: Pixelpost Photoblog XSS Vulnerability http://evuln.com/vulns/45/summary.html --------------------Summary---------------- Software: Pixelpost Photoblog Sowtware's Web Site: http://www.pixelpost.org/ Versions: 1.4.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remo...

My Little Homepage Products - BBCode Link Tag Script Injection

source: https://www.securityfocus.com/bid/16395/info My Little Homepage Web log, guestbook, and forum are prone to a script injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Trac: Cross-site scripting vulnerability

Background Trac is a minimalistic web-based project management, wiki and bug tracking system including a Subversion interface. Description Christophe Truc discovered that Trac fails to properly sanitize input passed in the URL. Impact A remote attacker could exploit this to inject and execute...

[eVuln] Text Rider Sensitive Information Disclosure

New eVuln Advisory: Text Rider Sensitive Information Disclosure http://evuln.com/vulns/46/summary.html --------------------Summary---------------- Software: Text Rider Sowtware's Web Site: http://robot.ir/blog/mollasadra/textrider/ Versions: 2.4 Critical Level: Dangerous Type: Sensitive Informati...

CheesyBlog 1.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/16376/info CheesyBlog is prone to multiple HTML injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

MyBB 1.0.1/1.0.2 Notepad - 'usercp.php' HTML Injection

source: https://www.securityfocus.com/bid/16361/info MyBB is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the contex...

AZ Bulletin Board 1.0.x1.1 - post.php HTML Injection

AZ Bulletin Board 1.0.x1.1 - post.php HTML Injection source: https://www.securityfocus.com/bid/16351/info AZbb is prone to HTML-injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-suppli...

PowerPortal 1.11.3 - search.php Cross-Site Scripting

PowerPortal 1.11.3 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16279/info PowerPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

aoblogger 2.3 - 'login.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to: -...

RedKernel Referrer Tracker 1.1.0-3 - Rkrt_stats.php Cross-Site Scripting

RedKernel Referrer Tracker 1.1.0-3 - Rkrtstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16266/info Referrer Tracker is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

Apache Geronimo 1.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/16260/info Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data, or...

Apache Geronimo 1.0 - Error Page Cross-Site Scripting

Apache Geronimo 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/16260/info Apache Geronimo is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to...

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting

Ultimate Auction 3.67 - ItemList.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...