AzDGDatingLite 2.1.1 - index.php?language Cross-Site Scripting

AzDGDatingLite 2.1.1 - index.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes...

AzDGDatingLite 2.1.1 - 'view.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code. Exploitation could facilitate thef...

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting source: https://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These...

Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001

-- Security Advisory -- Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 -- Author: Ory Segal , Sanctum inc. http://www.SanctumInc.com -- Release Date: April 5th. 2004 -- Product: Microsoft SharePoint Portal Server 2001 -- Severity: High -- CVE: CAN-2004-0379 -- Description...

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection (2)

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection 2 source: https://www.securityfocus.com/bid/9997/info Reportedly A-Cart is prone to multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input prior to its use i...

Topic Calendar 1.0.1 - Calendar_Scheduler.php Cross-Site Scripting

Topic Calendar 1.0.1 - CalendarScheduler.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Centrinity FirstClass HTTP Server Cross Site Scripting

Product: FirstClass HTTP Server Developer: Centrinity URL: http://www.centrinity.com Description: Injected code is rendered in the context of the vulnerable page. Exploit: http://TARGET/.Templates/Commands/Upload.shtml?TargetName=scriptalert'XSS'/script It may be possible to steal cookies from...

Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9947/info It has been reported that MS-Analysis is prone to a multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

vBulletin 2.x - 'private.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9940/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'ptivate.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

Oracle 9iAS iSQLplus XSS

The remote host is running a version of the Oracle9i 'isqlplus' CGI that is vulnerable to a cross-site scripting attack. An attacker may exploit this flaw to steal the cookies of legitimate users on the remote host. %NASLMINLEVEL 70300 This script was written by Frank Berger This vulnerability wa...

vBulletin 3.0 - forumdisplay.php Cross-Site Scripting

vBulletin 3.0 - forumdisplay.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9888/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'forumdisplay.php' script. This issue is reportedly due to a failure to sanitize user input and so...

vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9888/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'forumdisplay.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

vBulletin 3.0 - 'showthread.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9889/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'showthread.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

PHP-Nuke 7.1 Recommend_Us Module - fname Cross-Site Scripting

PHP-Nuke 7.1 RecommendUs Module - fname Cross-Site Scripting source: https://www.securityfocus.com/bid/9879/info It has been reported that PHP-Nuke may be prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data via...

PHP-Nuke 7.1 Recommend_Us Module - 'fname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9879/info It has been reported that PHP-Nuke may be prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data via the 'Your Name', 'nicname', 'fname', 'ratenum', and 'search'...

vHost < 3.10r1 Unspecified XSS

The remote host is running a version of vHost that is older than 3.10r1. There is a cross-site scripting vulnerability in this version that may allow an attacker to steal the cookies of the legitimate users of this site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

cPanel 5/6/7/8/9 - 'dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of user-supplie...

GNU MyProxy 20030629 - Cross-Site Scripting

GNU MyProxy 20030629 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9846/info It has been reported that GNU MyProxy may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself...

GNU MyProxy 20030629 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9846/info It has been reported that GNU MyProxy may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to insufficient sanitization of...