PHPGedView 2.52.6 - login.php?Username Cross-Site Scripting

PHPGedView 2.52.6 - login.php?Username Cross-Site Scripting source: https://www.securityfocus.com/bid/11904/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...

PHPGedView 2.52.6 - Gedrecord.php Cross-Site Scripting

PHPGedView 2.52.6 - Gedrecord.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11891/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issu...

PHPGedView 2.52.6 - Individual.php Cross-Site Scripting

PHPGedView 2.52.6 - Individual.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11882/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This iss...

PHPGedView 2.52.6 - Imageview.php Cross-Site Scripting

PHPGedView 2.52.6 - Imageview.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11890/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issu...

PHPGedView 2.5/2.6 - 'Gdbi_interface.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11894/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious...

PHPGedView 2.5/2.6 - 'login.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11903/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious...

PHPGedView 2.5/2.6 - 'Imageview.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11890/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious...

PHPGedView 2.5/2.6 - 'Source.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11888/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious...

ZYXEL ZyWALL 10 Management Interface - Cross-Site Scripting

ZYXEL ZyWALL 10 Management Interface - Cross-Site Scripting source: https://www.securityfocus.com/bid/9373/info ZyWALL 10 firewalls are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to...

Edimax AR-6004 ADSL Router - Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a site hosting the software...

SnapStream PVS Lite 2.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9375/info SnapStream PVS Lite is prone to a cross-site scripting vulnerability. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a system hosting the software that contains embedded HTML and script code. The...

PhpGedView 2.61 - Search Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/9369/info PhpGedView is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to this script that include hostile HTML and script code. If such a link was followed by a victim user, the attacker-supplied code would be...

FreznoShop 1.2.3/1.3 - Search Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/9359/info FreznoShop is prone to a cross-site scripting vulnerability. Remote attackers may create malicious links to the software that include hostile HTML and script code. If such a link was followed by a victim user, the attacker-supplied code would be...

Private Message System 2.x - index.php?Page Cross-Site Scripting

Private Message System 2.x - index.php?Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9308/info Private Message System is prone to a cross-site scripting vulnerability. This issue may be exploited by creating a malicious link to a site hosting the software with hostile HTML a...

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9307/info Multiple cross-site scripting vulnerabilities have been reported in L-Soft Listserv. An attacker may exploit these issues by embedding hostile HTML and script code in a link to ...

osCommerce 2.2 - osCsid Cross-Site Scripting

osCommerce 2.2 - osCsid Cross-Site Scripting source: https://www.securityfocus.com/bid/9238/info It has been reported that osCommerce may be prone to a cross-site scripting vulnerability that may allow an attacker to construct a malicious link containing HTML or script code that may be rendered i...

osCommerce 2.2 - 'osCsid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9238/info It has been reported that osCommerce may be prone to a cross-site scripting vulnerability that may allow an attacker to construct a malicious link containing HTML or script code that may be rendered in a user's browser. Successful exploitation o...

CVE-2003-0975

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character %00 followed by the target domain...

CVE-2003-0975

CVE-2003-0975 affects Apple Safari 1.0–1.1 on Mac OS X 10.3.1 and 10.2.8, where remote attackers could steal cookies from another domain via a hex-encoded null character (%00) in a link followed by the target domain. The vulnerability arises in Safari’s handling of domain switching with a NULL by...

CVE-2003-0975

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character %00 followed by the target domain...