CVE-2004-0192

Cross-site scripting XSS vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page...

New phpBB ViewTopic.php Cross Site Scripting Vulnerability

Advisory Name:New phpBB ViewTopic.php Cross Site Scripting Vulnerability Release Date: Feb 29,2004 Application: phpBB Platform: PHP Version Affected: the lastest version Vendor URL: http://www.phpbb.com/ Discover: Cheng Peng Suapplesoupatmsn.com Details: This vuln is similar to Arab VieruZ's...

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI...

Invision Power Board (IP.Board) 1.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9768/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to insufficient sanitization of input supplied via the 'c', 'f', , 'showuser', and 'username' URI parameters. This input will be included in...

IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters Exploitation could allow for theft of cookie-based...

[Full-Disclosure] Symantec Gateway Security Management Service Cross Site Scripting

Symantec Gateway Security Management Service Cross Site Scripting Product: Symantec Gateway Security 2.0 Date: 02/25/2004 Author: Brian Soby, Raytheon 1. Overview ---------------------------------------- A cross site scripting vulnerability exists in Symantec Gateway Security's management service...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting...

Sandblad #13: Cross-domain exploit on zombie document with event handlers

PUBLIC SECURITY ADVISORY: Sandblad 13 -------------------------------------------------------------- Title: Cross-domain exploit on zombie document with event handlers Date: 2004-02-25 Software: Mozilla web browser Vendor: http://www.mozilla.org/ Status: Patched Reference:...

LiveJournal 1.1 - CSS HTML Injection

LiveJournal 1.1 - CSS HTML Injection source: https://www.securityfocus.com/bid/9727/info LiveJournal is reportedly prone to HTML injection via Cascading Style Sheet CSS tags. It is possible to inject hostile HTML and script code into journal entries through this vulnerability. This could...

LiveJournal 1.1 - CSS HTML Injection

source: https://www.securityfocus.com/bid/9727/info LiveJournal is reportedly prone to HTML injection via Cascading Style Sheet CSS tags. It is possible to inject hostile HTML and script code into journal entries through this vulnerability. This could potentially be exploited to steal cookies fro...

CVE-2003-0992

Cross-site scripting XSS vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users...

ASP Portal User Profile XSS

The remote host is running the ASP Portal CGI suite. There is a cross-site scripting issue in this suite that may allow an attacker to steal your users cookies. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid12057;...

vBulletin search.php query Parameter XSS

There is a cross-site scripting issue in vBulletin that may allow an attacker to steal a user's cookies. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid12058; scriptversion"1.24"; scriptcveid"CVE-2004-2076";...

vBulletin 3.0 - search.php Cross-Site Scripting

vBulletin 3.0 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9656/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'search.php' script. This issue is reportedly due to a failure to sanitize user input and so allow HTML a...

vBulletin 3.0 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9656/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'search.php' script. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site...

vBulletin 1.01.12.0.x2.2.x - Cross-Site Scripting

vBulletin 1.01.12.0.x2.2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may...

vBulletin 1.0/1.1/2.0.x/2.2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site scripting attacks. Upon...

Discuz! 2.0/3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9584/info It has been reported that Discuz! is prone to an Cross Site Scripting vulnerability. This issue is caused by the application failing to properly sanitize links embedded within user messages. Upon successful exploitation of this issue, a maliciou...

RXGoogle.CGI 1.02.5 - Cross-Site Scripting

RXGoogle.CGI 1.02.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9575/info The rxgoogle.cgi search script is prone to a cross-site scripting vulnerability because the software fails to sanitize user input and allows various metacharacters that may facilitate cross-site scripti...

Multiple Vulnerabilities in PHPX

Title: Multiple Vulnerabilities in PHPX By: Manuel Lpez [email protected] FROM IST libres.irc-hispano.org, IST Efnet. Url: http://www.phpx.org Description: PHPX is a web portal system, blog, Content Management System CMS, forums, and more. PHPX is designed to allow everyone to be able to have...