GTP iCommerce - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16255/info GTP iCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitat...

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting

source: https://www.securityfocus.com/bid/16239/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Alstrasoft Template Seller Pro 3.25 - Fullview.php Cross-Site Scripting

Alstrasoft Template Seller Pro 3.25 - Fullview.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16233/info Template Seller Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

DCP Portal 5.3/6.0/6.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16232/info DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. For the cross-site scripting vulnerability, an attacker may leverage these issues t...

DCP Portal 5.36.06.1 - Multiple Input Validation Vulnerabilities

DCP Portal 5.36.06.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16232/info DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. For the cross-site...

Fog Creek Software FogBugz 4.0 29 - default.asp Cross-Site Scripting

Fog Creek Software FogBugz 4.0 29 - default.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

MyPHPim - calendar.php3?cal_id SQL Injection

MyPHPim - calendar.php3?calid SQL Injection source: https://www.securityfocus.com/bid/16210/info MyPhPim is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

WebWiz Forums - 'Search_form.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...

EV0018.txt

New eVuln Advisory: 427BB Multiple Vulnerabilities Cookie-based Authentication Bypass, SQL Injections, XSS --------------------Summary---------------- Software: 427BB Sowtware's Web Site: http://sourceforge.net/projects/fourtwosevenbb Versions: checked: 2.2 and 2.2.1 Critical Level: Dangerous Typ...

[eVuln] 427BB Multiple Vulnerabilities (Cookie-based Authentication Bypass, SQL Injections, XSS)

New eVuln Advisory: 427BB Multiple Vulnerabilities Cookie-based Authentication Bypass, SQL Injections, XSS --------------------Summary---------------- Software: 427BB Sowtware's Web Site: http://sourceforge.net/projects/fourtwosevenbb Versions: checked: 2.2 and 2.2.1 Critical Level: Dangerous Typ...

aolXSS.txt

Title: AOL Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 26 December 2005 Published: 7 January 2006 MorX Security Research Team http://www.morx.org Service: Web Vendor: AOL.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity:...

WebWiz Forums - Search_form.asp Cross-Site Scripting

WebWiz Forums - Searchform.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...

PHP-Nuke News Submission Story - Text Field Cross-Site Scripting

PHP-Nuke News Submission Story - Text Field Cross-Site Scripting source: https://www.securityfocus.com/bid/16192/info The PHPNuke Pool and News Modules are prone to an HTML injection vulnerability. This issue is due to a failure in the application modules to properly sanitize user-supplied input...

Foro Domus 2.10 - Multiple Input Validation Vulnerabilities

Foro Domus 2.10 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16154/info Foro Domus is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation...

[eVuln] Chipmunk Guestbook XSS Vulnerability

New eVuln Advisory: Chipmunk Guestbook XSS Vulnerability --------------------Summary---------------- Vendor: Chipmunk http://www.chipmunk-scripts.com/ Software: Chipmunk Guestbook Versions: 1.4 and earlier Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit...

Chimera Web Portal 0.2 - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16113/info Chimera Web Portal is prone to multiple input validation vulnerabilities. The issues include cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

OOApp Guestbook 2.1 Home Script - Cross-Site Scripting

OOApp Guestbook 2.1 Home Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/16091/info OOApp Guestbook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

GMailSite 1.0.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/16081/info GMailSite is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of...

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection

source: https://www.securityfocus.com/bid/16300/info Phpclanwebsite is prone to a script-injection vulnerability. An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HTML and script code would be able to access properties of...

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection

Phpclanwebsite 1.23.1 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/16300/info Phpclanwebsite is prone to a script-injection vulnerability. An attacker can nest BBCode IMG tags to trigger this issue and execute arbitrary code in a user's browser. Attacker-supplied HT...