MilliScripts 1.4 - 'register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15792/info MilliScripts is prone to a cross-site scripting vulnerability. This is due to a lack of proper input validation. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of...

Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection

source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input. A remote...

Easy Search System 1.1 - 'search.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15705/info Easy Search System is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the...

Solupress News 1.0 - search.asp Cross-Site Scripting

Solupress News 1.0 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15695/info Solupress News is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15694/info ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

SiteBeater News 4.0 - 'Archive.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15697/info SiteBeater News is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

[Full-disclosure] SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs

SEC-CONSULT Security Discussion Paper 20051202-1 ================================================================================ title: A Word on Webmail Security and Browser related XSS Bugs program: Multiple Webmail Solutions found: --- by: SEC Consult Vulnerability Lab / www.sec-consult.com...

PHP Web Statistik 1.4 - Content Injection

PHP Web Statistik 1.4 - Content Injection source: https://www.securityfocus.com/bid/15603/info PHP Web Statistik is prone to multiple content injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The vulnerabilities could allow f...

SearchSolutions 1.2/1.3 (Multiple Products) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15612/info SearchSolutions SearchFeed, RevenuePilot, and Google API are prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

SearchSolutions 1.21.3 (Multiple Products) - Cross-Site Scripting

SearchSolutions 1.21.3 Multiple Products - Cross-Site Scripting source: https://www.securityfocus.com/bid/15612/info SearchSolutions SearchFeed, RevenuePilot, and Google API are prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitiz...

PBLang Bulletin Board System 4.65 - Multiple HTML Injection Vulnerabilities

PBLang Bulletin Board System 4.65 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/15573/info PBLang is prone to multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using i...

blogBuddies 0.3 - magpie_slashbox.php?rss_url Cross-Site Scripting

blogBuddies 0.3 - magpieslashbox.php?rssurl Cross-Site Scripting source: https://www.securityfocus.com/bid/15555/info blogBuddies is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker m...

Tunez 1.21 - songinfo.php?song_id SQL Injection

Tunez 1.21 - songinfo.php?songid SQL Injection source: https://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the SQL...

PHPPost 1.0 - 'mail.php?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

VP-ASP Shopping Cart - 'Shopadmin.asp' HTML Injection

source: https://www.securityfocus.com/bid/15490/info VP-ASP Shopping Cart is prone to an HTML injection vulnerability. This is due to a lack of proper validation of user-supplied input before being used in dynamically generated content. Attacker-supplied HTML and script code would be executed in...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary...

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting

Litespeed 2.1.5 - ConfMgr.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

VP-ASP Shopping Cart - Shopadmin.asp HTML Injection

VP-ASP Shopping Cart - Shopadmin.asp HTML Injection source: https://www.securityfocus.com/bid/15490/info VP-ASP Shopping Cart is prone to an HTML injection vulnerability. This is due to a lack of proper validation of user-supplied input before being used in dynamically generated content...

TikiWiki 1.9 - Tiki-view_forum_thread.php Cross-Site Scripting

TikiWiki 1.9 - Tiki-viewforumthread.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15371/info TikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Invision Power Board (IP.Board) 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15344/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitiz...