CVE-2003-0975: Undefined Security Weakness

Apple Safari 1.0 through 1.1 on Mac OS X 10.3.1 and Mac OS X 10.2.8 allows remote attackers to steal user cookies from another domain via a link with a hex-encoded null character %00 followed by the target domain...

Websense Enterprise 45 - Blocked Sites Cross-Site Scripting

Websense Enterprise 45 - Blocked Sites Cross-Site Scripting source: https://www.securityfocus.com/bid/9149/info Websense Enterprise displays error pages for blocked sites without sufficiently sanitizing HTML and script code from the blocked site URI. This could allow for cross-site scripting...

Websense Enterprise 4/5 - Blocked Sites Cross-Site Scripting

source: https://www.securityfocus.com/bid/9149/info Websense Enterprise displays error pages for blocked sites without sufficiently sanitizing HTML and script code from the blocked site URI. This could allow for cross-site scripting attacks if a victim user visits a link to a blocked site that...

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting

IBM Directory Server 4.1 - Web Administration Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9140/info IBM Directory Server is prone to cross-site scripting attacks via the web administrative interface. An attacker may be able to embed hostile HTML and script code in a...

Apple Safari 1.1 (v100)

Hi, it appears that Apple's Safari is vulnerable to the old Mozilla/IE cookie theft vulnerability outlined by Marc Slemko http://alive.znep.com/marcs/security/mozillacookie/ Marc posted a nice demo so that you can verify the vulnerability...

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting

Fortigate Firewall 2.x - Policy Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an...

Fortigate Firewall 2.x - listdel Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

Fortigate Firewall 2.x - selector Admin Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious link that includes hostile HTML and...

OpenAutoClassifieds 1.0 - 'Listing' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8972/info It has been reported that OpenAutoClassifieds is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'listings' parameter. The problem may allow a remote...

John Beatty Easy PHP Photo Album 1.0 - 'dir' HTML Injection

source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'dir' parameter. This problem is due to...

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be...

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8956/info It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' paramete...

MPM Guestbook 1.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8958/info MPM Guestbook is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically generated by the software. An attacker...

Synthetic Reality SymPoll 1.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8956/info It has been reported that Sympoll is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data through the 'vo' parameter. The problem may allow a remote attacker to execute...

PHPKit 1.6 - Include.php Cross-Site Scripting

PHPKit 1.6 - Include.php Cross-Site Scripting source: https://www.securityfocus.com/bid/8960/info PHPKIT is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically...

PHPKit 1.6 - 'Include.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8960/info PHPKIT is reported to be prone to a cross-site scripting vulnerability. This is due to insufficient sanitization of HTML from URI parameters, which will be displayed in web pages that are dynamically generated by the software. The issue exists i...

BEA WebLogic 678 - InteractiveQuery.jsp Cross-Site Scripting

BEA WebLogic 678 - InteractiveQuery.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/8938/info It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient...

BEA WebLogic 6/7/8 - InteractiveQuery.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/8938/info It has been reported that BEA WebLogic InteractiveQuery.jsp example application is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data in an initialization argument...

Citrix Metaframe XP - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in page. Exploitation of this issue could...

Ledscripts LedForums - Multiple HTML Injections

Ledscripts LedForums - Multiple HTML Injections source: https://www.securityfocus.com/bid/8934/info It has been reported that LedForums is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the...