SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it...

OpenBB 1.0.x - myhome.php?to Cross-Site Scripting

OpenBB 1.0.x - myhome.php?to Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...

OpenBB 1.0.x - index.php?redirect Cross-Site Scripting

OpenBB 1.0.x - index.php?redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input...

OpenBB 1.0.x - post.php?TID Cross-Site Scripting

OpenBB 1.0.x - post.php?TID Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...

OpenBB 1.0.x - 'post.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

OpenBB 1.0.x - 'board.php?FID' SQL Injection

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

OpenBB 1.0.x - 'search.php?q' SQL Injection

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

OpenBB 1.0.x - 'myhome.php?to' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

OpenBB 1.0.x - 'post.php?TID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

Fusionphp Fusion News 3.6.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10203/info An attacker may be capable of executing arbitrary script code in a browser of a target user and within the context of a visited web site. This may potentially lead to theft of cookie based authentication credentials, other attacks are also...

ProfitCode Software PayProCart 3.0 - AdminShop TaskID Cross-Site Scripting

ProfitCode Software PayProCart 3.0 - AdminShop TaskID Cross-Site Scripting source: https://www.securityfocus.com/bid/13307/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

ProfitCode Software PayProCart 3.0 - AdminShop TaskID Cross-Site Scripting

source: https://www.securityfocus.com/bid/13307/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

[Full-Disclosure] Zaep AntiSpam Cross Site Scripting

Zaep AntiSpam Cross Site Scripting ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html SUMMARY Beyond Security has discovered a security vulnerability in http://www.zaep.com/ Zaep AntiSpam 2.0, the...

SCT Campus Pipeline 1.02.x3.x - Email Attachment Script Injection

SCT Campus Pipeline 1.02.x3.x - Email Attachment Script Injection source: https://www.securityfocus.com/bid/10154/info It has been reported that Campus Pipeline is prone to a remote email attachment script injection vulnerability. This issue is due to a failure of the application to properly...

phpBugTracker 0.9 - query.php Multiple Cross-Site Scripting Vulnerabilities

phpBugTracker 0.9 - query.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. Thes...

phpBugTracker 0.9 - 'bug.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

[NT] Zaep AntiSpam Cross Site Scripting

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

PHP-Nuke 6.x/7.x - CookieDecode Cross-Site Scripting

source: https://www.securityfocus.com/bid/10128/info Reportedly PHP-NuKe is prone to a remote cross-site scripting vulnerability. This issue is due to a failure of the 'cookiedecode' function to properly sanitize user supplied cookie parameters. These issues could permit a remote attacker to crea...

BlackBoard Learning System 5.x6.0 - Multiple Cross-Site Scripting Vulnerabilities

BlackBoard Learning System 5.x6.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10101/info Blackboard Learning System has been reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to...

CVE-2004-0379

CVE-2004-0379 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001. The affected component is three scripts within SharePoint Portal Server 2001, where XSS could allow remote attackers to process arbitrary web content and steal cookies via ...