PBLang Forum XSS Vul

PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...

cPanel Malicious HTML Tags Injection Vulnerability

------------------------------------------------------------------------------- ----- cPanel Malicious HTML Tags Injection Vulnerability ------------------------------------------------------------------------------- -- Author: Ory Segal, Sanctum inc. http://www.SanctumInc.com -- Discovery Date:...

ProductCart 1.51.62.0 - MSG.asp Cross-Site Scripting

ProductCart 1.51.62.0 - MSG.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/8108/info A cross-site scripting vulnerability has been reported for ProductCart. The vulnerability exists due to insufficient sanitization of some user-supplied values. Exploitation could permit an...

ProductCart 1.5/1.6/2.0 - 'MSG.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8108/info A cross-site scripting vulnerability has been reported for ProductCart. The vulnerability exists due to insufficient sanitization of some user-supplied values. Exploitation could permit an attacker to steal cookie-based authentication credential...

Verity K2 Toolkit 2.20 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8073/info It has been reported that Verity K2 Toolkit does not sufficiently filter user-supplied search parameters. As a result of this reported deficiency, it may be possible for a remote attacker to create a malicious link containing script code that wi...

Verity K2 Toolkit 2.20 - Cross-Site Scripting

Verity K2 Toolkit 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8073/info It has been reported that Verity K2 Toolkit does not sufficiently filter user-supplied search parameters. As a result of this reported deficiency, it may be possible for a remote attacker to create a...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

BRS Webweaver 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when...

XSS Exploit In phpBB viewtopic.php

XSS Exploit In phpBB viewtopic.php A: BACKGROUND from phpbb.com phpBB is a high powered, fully scalable, and highly customisable open- source bulletin board package. phpBB has a user-friendly interface, simple and straightforward administration panel, and helpful FAQ. Based on the powerful PHP...

Many XSS Vulnerabilities in XMB Forum.

Many XSS Vulnerabilities in XMB Forum. Program Name : XMB Forum AffectedVersion : 1.8 Partagium may be the newest version Home Page : http://www.xmbforum.com Author : Knight Commander at hackervn.net +Vul: In this link: http://pathto/XMBforum/member.php?action=viewpro&member=adminscriptalert...

XMB Forum 1.8 - member.php Cross-Site Scripting

XMB Forum 1.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks...

pod.board 1.1 Multiple Script XSS

The remote host is hosting the Pod.Board CGI suite, a set of PHP scripts designed to manage online forums. There is a cross-site scripting issue in this suite that could allow an attacker to steal the cookies of your legitimate users, by luring them into clicking on a rogue URL. %NASLMINLEVEL 703...

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection source: https://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages...

Microsoft Internet Explorer 56 - MSXML XML File Parsing Cross-Site Scripting

Microsoft Internet Explorer 56 - MSXML XML File Parsing Cross-Site Scripting source: https://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse...

lednews.txt

XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...

Microsoft Internet Explorer 5/6 - MSXML XML File Parsing Cross-Site Scripting

source: https://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse the requested XML file, it will display a parse error that also includes the...

LedNews News Post XSS

The remote web server is running LedNews, a set of scripts designed to help maintain a news-based website. There is a flaw in some versions of LedNews that could allow an attacker to include rogue HTML code in the news, which may in turn be used to steal the cookies of people visiting this site, ...

Snitz Forums 2000 3.4.03 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7922/info Snitz Forums is prone to cross-site scripting attacks. This is due to insufficient sanitization of data passed to the search facility via URI parameters. Exploitation may allow theft of cookie-based authentication credentials or other attacks...

LedNews 0.7 Post Script - Code Injection

LedNews 0.7 Post Script - Code Injection source: https://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities...

Snitz Forums 2000 3.4.03 - search.asp Cross-Site Scripting

Snitz Forums 2000 3.4.03 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/7922/info Snitz Forums is prone to cross-site scripting attacks. This is due to insufficient sanitization of data passed to the search facility via URI parameters. Exploitation may allow theft of...

LedNews 0.7 Post Script - Code Injection

source: https://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities...