CVE-2002-0292

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field...

CVE-2002-0330

Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board OpenBB 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag...

CVE-2002-0292

The CVE-2002-0292 entry describes a cross-site scripting (XSS) vulnerability in Slash before 2.2.5 (used in Slashcode and related projects). The issue allows remote attackers to steal cookies and authentication information from other users by injecting JavaScript into a URL (potentially via the f...

PHP-Nuke block-Forums.php subject vulnerabilities

The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...

CC GuestBook cc_guestbook.pl Multiple Parameter XSS

The remote host is running ccguestbook.pl, a guestbook written in Perl. This CGI is vulnerable to a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: "BrainRawt ." To:...

Beanwebb's Guestbook 1.0 Multiple Vulnerabilities

The remote host is running Beanwebb's Guestbook. This set of CGIs has two vulnerabilities : - Anyone can access the admin page admin.php - It is vulnerable to cross-site scripting attacks in add.php An attacker may use these flaws to steal the cookies of your users or to inject fake information i...

Sambar Server Multiple Script XSS

The Sambar web server comes with a set of CGIs are that vulnerable to a cross-site scripting attack. An attacker may use this flaw to steal the cookies of your web users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: 27 Mar 2003 17:26:19 -0000 From: Gregory Le Bras To:...

Web Chat Manager 2.0 - HTML Code Injection

source: https://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker may embed HTML code via a HTML form field o...

Web Chat Manager 2.0 - HTML Code Injection

Web Chat Manager 2.0 - HTML Code Injection source: https://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker...

osCommerce 2.1/2.2 - Error_Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/7151/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that...

osCommerce 2.12.2 - Error_Message Cross-Site Scripting

osCommerce 2.12.2 - ErrorMessage Cross-Site Scripting source: https://www.securityfocus.com/bid/7151/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker ...

osCommerce 2.1/2.2 - Info_Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a malicious link containing script code that...

Basit 1.0 Search Module - Cross-Site Scripting

Basit 1.0 Search Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/7142/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker m...

Siteframe 2.2.4 - search.php Cross-Site Scripting Vulnerability

Siteframe 2.2.4 search.php Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/7140/info It has been reported that Siteframe does not sufficiently filter user supplied URI parameters on Siteframe pages. As a result of this deficiency, it i...

Basit 1.0 Search Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/7142/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker may exploit the vulnerability by creating a...

Basit 1.0 Submit Module - Cross-Site Scripting

Basit 1.0 Submit Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/7139/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker m...

DCP-Portal 5.3.1 - calendar.php Cross-Site Scripting

DCP-Portal 5.3.1 - calendar.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7144/info It has been reported that DCP-Portal does not sufficiently filter URI parameters supplied to the DCP-Portal 'calender' script. As a result of this deficiency, it is possible for a remote...

Basit 1.0 Submit Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/7139/info A cross-site scripting vulnerability has been reported for Basit. This vulnerability occurs due to insufficient sanitization of some user-supplied input. As a result of this deficiency an attacker may exploit the vulnerability by creating a...

Mambo Site Server 4.0.10 - index.php Cross-Site Scripting

Mambo Site Server 4.0.10 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7135/info Mambo Site Server has been reported prone to a cross-site scripting vulnerability. It has been reported that certain user supplied URI parameters are not sufficiently sanitized by the Mam...

Mambo Site Server 4.0.10 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7135/info Mambo Site Server has been reported prone to a cross-site scripting vulnerability. It has been reported that certain user supplied URI parameters are not sufficiently sanitized by the Mambo Site Server. As a result of this deficiency an attacker...