PhpBB HTTP Response Splitting & Cross Site Scripting vulnerabilities

///////////////////////////////////////////////////////////////////// //=================== Security Advisory =======================// ///////////////////////////////////////////////////////////////////// --------------------------------------------------------------------- --- PhpBB HTTP Respon...

SCI Photo Chat 3.4.9 - Cross-Site Scripting

SCI Photo Chat 3.4.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component...

SCI Photo Chat 3.4.9 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component of SCI Chat server will display an error...

CuteNews 1.3 - Comment HTML Injection

CuteNews 1.3 - Comment HTML Injection source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not...

CuteNews 1.3 - Comment HTML Injection

source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML...

PScript PForum 1.241.25 - User Profile HTML Injection

PScript PForum 1.241.25 - User Profile HTML Injection source: https://www.securityfocus.com/bid/10954/info PScript PForum is reported prone to a HTML injection vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on data submitted through input field...

CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious UR...

BoardPower Forum - ICQ.cgi Cross-Site Scripting

BoardPower Forum - ICQ.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/10734/info BoardPower Forum is reportedly affected by a cross-site scripting vulnerability in the icq.cgi script. This issue is due to a failure of the application to properly sanitize user-supplied URI inpu...

Gattaca Server 2003 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the...

Gattaca Server 2003 - Cross-Site Scripting

Gattaca Server 2003 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issu...

Moodle Help Script 1.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content...

Jaws 0.2/0.3 - 'gadget' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...

Mac OS X Safari Null Character Cookie Theft (Security Update 2003-12-05)

The remote host is missing Mac OS X Security Update 2003-12-05. This update fixes a flaw in the Safari web browser that may allow a rogue website to access the web cookies of the user of the remote host. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...

12Planet Chat Server 2.9 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when malicious HTML or script code is passed in a URI...

BasiliX Webmail 1.1 - Email Header HTML Injection

source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain acces...

12Planet Chat Server 2.9 - Cross-Site Scripting

12Planet Chat Server 2.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when...

Netegrity IdentityMinder Web Edition 5.6 - Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for creating and removing users in multi-user environments. It has been...

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting

Netegrity IdentityMinder Web Edition 5.6 - Null Byte Cross-Site Scripting source: https://www.securityfocus.com/bid/10645/info Netegrity IdentityMinder is a tool designed for the Microsoft Windows platform to manage and maintain users and user accounts. The tool supports a web based interface for...

McMurtreyWhitaker Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting

McMurtreyWhitaker Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/10617/info Cart32 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote...

McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10617/info Cart32 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the vulnerable...