Cross Site Scripting Vulnerability in Sympa

--------------------------------------------------------------------------- Cross Site Scripting Vulnerability in Sympa --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting...

Sympa 4.x - New List HTML Injection

Sympa 4.x - New List HTML Injection source: https://www.securityfocus.com/bid/10992/info An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data. Unsuspecting users viewing the affected page will ha...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

Sympa 4.x - New List HTML Injection

source: https://www.securityfocus.com/bid/10992/info An HTML injection vulnerability is reported in Sympa. The problem occurs due to a failure of the application to properly sanitize user-supplied input data. Unsuspecting users viewing the affected page will have attacker-supplied malicious code...

Nihuo Web Log Analyzer 1.6 - HTML Injection

Nihuo Web Log Analyzer 1.6 - HTML Injection source: https://www.securityfocus.com/bid/10988/info An HTML injection vulnerability is reported in Nihuo Web Log Analyzer. The problem occurs due to a lack of proper sanitization of user-supplied input data. Attackers may potentially exploit this issue...

Moodle 1.x - post.php Cross-Site Scripting

Moodle 1.x - post.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10884/info It is reported that Moodle is vulnerable to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in...

Moodle 1.x - 'post.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10884/info It is reported that Moodle is vulnerable to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content. This issue could permit a...

WackoWiki TextSearch phrase Parameter XSS

The remote host seems to be running the WackoWiki CGI suite. Based on the version information gathered by Nessus, this instance of WackoWiki may be vulnerable to a remote authentication attack. Exploitation of this vulnerability may allow for theft of cookie-based authentication credentials and...

PluggedOut Blog 1.511.60 - Blog_Exec.php Cross-Site Scripting

PluggedOut Blog 1.511.60 - BlogExec.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10885/info PluggedOut Blog is reported prone to a cross-site scripting vulnerability. This could allow for execution of hostile HTML and script code in the web client of a user who visits a...

PluggedOut Blog 1.51/1.60 - 'Blog_Exec.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10885/info PluggedOut Blog is reported prone to a cross-site scripting vulnerability. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would...

Opera: Location, Location, Location

GreyMagic Security Advisory GM008-OP ===================================== By GreyMagic Software, 05 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm008-op/. Topic: Location, Location, Location. Discovery date: 19 Jul 2004. Affected applications:...

Opera: Location, Location, Location

GreyMagic Security Advisory GM008-OP ===================================== By GreyMagic Software, 05 Aug 2004. Available in HTML format at http://www.greymagic.com/security/advisories/gm008-op/. Topic: Location, Location, Location. Discovery date: 19 Jul 2004. Affected applications:...

eNdonesia 8.3 - Search Form Cross-Site Scripting

eNdonesia 8.3 - Search Form Cross-Site Scripting source: https://www.securityfocus.com/bid/10856/info It is reported that eNdonesia is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including...

PostNuke Reviews Module title Parameter XSS

The remote host is running a version of PostNuke that contains the 'Reviews' module, which itself is vulnerable to a cross-site scripting issue. An attacker may use this flaw to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2002:064)

A vulnerability was discovered in Konqueror's cross site scripting protection, in that it fails to initialize the domains on sub-iframes correctly. Because of this, JavaScript may access any foreign subframe which is defined in the HTML source, which can be used to steal cookies from the client a...

Verylost LostBook 1.1 - Message Entry HTML Injection

source: https://www.securityfocus.com/bid/10825/info Reportedly Verylost lostBook is affected by an HTML injection vulnerability in its message entry functionality. This issue is due to a failure of the application to properly validate and sanitize user-supplied input before including it in...

Verylost LostBook 1.1 - Message Entry HTML Injection

Verylost LostBook 1.1 - Message Entry HTML Injection source: https://www.securityfocus.com/bid/10825/info Reportedly Verylost lostBook is affected by an HTML injection vulnerability in its message entry functionality. This issue is due to a failure of the application to properly validate and...

PostNuke 0.720.75 Reviews Module - Cross-Site Scripting

PostNuke 0.720.75 Reviews Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of...

PostNuke 0.72/0.75 Reviews Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of cookie-based authentication credentials. Other attacks are als...