eNdonesia 8.28.3 - Mod Cross-Site Scripting

eNdonesia 8.28.3 - Mod Cross-Site Scripting source: https://www.securityfocus.com/bid/8506/info It has been reported that eNdonesia is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a victim's browser. The issue reportedly exists i...

eNdonesia 8.2/8.3 - 'Mod' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8506/info It has been reported that eNdonesia is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a victim's browser. The issue reportedly exists in the mod.php script via the 'mod' URI...

RealOne Player 1.02.06.0.106.0.11 - .SMIL File Script Execution

RealOne Player 1.02.06.0.106.0.11 - .SMIL File Script Execution source: https://www.securityfocus.com/bid/8453/info Real Networks has reported a vulnerability in RealOne Player. Script embedded in SMIL presentations may be executed in the context of a domain that is specified by an attacker. This...

XSS vulnerability in phpBB

Hi, I have found a dangerous vunlerability in phpBB. I've verified that versions 2.0.5 and 2.0.4 AFAIK the two latest versions are affected, but probably more versions are vulnerable. If HTML is enabled for postings, a user can post a link like this: a...

RealOne Player 1.0/2.0/6.0.10/6.0.11 - '.SMIL' File Script Execution

source: https://www.securityfocus.com/bid/8453/info Real Networks has reported a vulnerability in RealOne Player. Script embedded in SMIL presentations may be executed in the context of a domain that is specified by an attacker. This could allow for theft of cookie-based authentication credential...

Clickcess ChitChat.NET - topic title Cross-Site Scripting

source: https://www.securityfocus.com/bid/8417/info It has been reported that a html injection issue exists in the Clickcess ChitChat.NET discussion forum software. The vulnerability is reported to be present in the Name and Topic Title text boxes. The problem may allow a remote attacker to injec...

Eudora WorldMail 2.0 - Search Cross-Site Scripting

source: https://www.securityfocus.com/bid/8403/info It has been reported that a cross-site scripting issue exists in the search utility of the software. It is possible that an attacker may create a malicious link containing script code that could be executed in a user's browser. The successful...

PostNuke 0.60.7 Downloads Module - TTitle Cross-Site Scripting

PostNuke 0.60.7 Downloads Module - TTitle Cross-Site Scripting source: https://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containi...

PostNuke 0.6/0.7 web_links Module - TTitle Cross-Site Scripting

source: https://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that could be executed in a browser of...

PostNuke 0.6/0.7 Downloads Module - TTitle Cross-Site Scripting

source: https://www.securityfocus.com/bid/8374/info It has been reported that a cross site scripting vulnerability exists in the Downlaods and WebLinks modules of PostNuke. It is possible that an attacker may construct a link containing malicious script code that could be executed in a browser of...

IdealBB 1.4.9 - error.asp Cross-Site Scripting

IdealBB 1.4.9 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp...

IdealBB 1.4.9 - 'error.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp script on user-influenced URI parameters. This...

PBLang Cross Site Scripting Vulnerability (Newest version)

PBLang is a PHP-base forum. A security hole has just found in this product allows an attacker to steals cookies or does many things… |--------------------------------------------| Vulnerable systems: PBLang Forum Version: 4.56 4.5 RC 2 Website: http://pblang.drmartinus.de/ Problem: Cross Site...

PBLang Forum XSS Vul

PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...

cPanel Malicious HTML Tags Injection Vulnerability

------------------------------------------------------------------------------- ----- cPanel Malicious HTML Tags Injection Vulnerability ------------------------------------------------------------------------------- -- Author: Ory Segal, Sanctum inc. http://www.SanctumInc.com -- Discovery Date:...

ProductCart 1.51.62.0 - MSG.asp Cross-Site Scripting

ProductCart 1.51.62.0 - MSG.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/8108/info A cross-site scripting vulnerability has been reported for ProductCart. The vulnerability exists due to insufficient sanitization of some user-supplied values. Exploitation could permit an...

ProductCart 1.5/1.6/2.0 - 'MSG.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8108/info A cross-site scripting vulnerability has been reported for ProductCart. The vulnerability exists due to insufficient sanitization of some user-supplied values. Exploitation could permit an attacker to steal cookie-based authentication credential...

Verity K2 Toolkit 2.20 - Cross-Site Scripting

Verity K2 Toolkit 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8073/info It has been reported that Verity K2 Toolkit does not sufficiently filter user-supplied search parameters. As a result of this reported deficiency, it may be possible for a remote attacker to create a...

Verity K2 Toolkit 2.20 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/8073/info It has been reported that Verity K2 Toolkit does not sufficiently filter user-supplied search parameters. As a result of this reported deficiency, it may be possible for a remote attacker to create a malicious link containing script code that wi...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

BRS Webweaver 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when...