Comersus Cart 4.05.0 - Comersus_Search_Item.asp Cross-Site Scripting

Comersus Cart 4.05.0 - ComersusSearchItem.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13125/info Comersus Cart is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly validate user-supplied input. An attacker may...

PBLang Bulletin Board Multiple HTML Injection and XSS

Binary data 2643.prm...

Microsoft ASP.NET 1.01.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

Microsoft ASP.NET 1.01.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12574/info It is reported that ASP.NET is prone to various cross-site scripting attacks. These issues when ASP.NET converts Unicode characters ranging fr...

SmarterTools SmarterMail Attachment Upload XSS

There are flaws in the remote SmarterMail, a web mail interface. This version of SmarterMail is affected by a cross-site scripting issue. An attacker, exploiting this flaw, would be able to steal user credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ;...

Alt-N WebAdmin < 3.0.3 Multiple Remote Vulnerabilities

Binary data 2572.prm...

Comdev eCommerce 3.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12382/info Comdev eCommerce is reported prone to multiple cross-site scripting vulnerabilities. These may facilitate theft of cookie-based authentication credentials as well as other attacks. Comdev eCommerce 3.0 is reported prone to these issues. It is...

SiteMinder smpwservicescgi.exe Arbitrary Site Redirect

The remote host is running Netegrity SiteMinder, an access management solution. The remote version of this software is vulnerable to a page injection flaw that may allow an attacker to trick users into sending him their credentials via a link to the 'smpwservicescgi.exe' program with a rogue TARG...

CVE-2004-2580

Cross-site scripting XSS vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors...

GetSolutions GetInternet - Multiple SQL Injections

source: https://www.securityfocus.com/bid/11150/info getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the application to properly validate user-supplied input pri...

GetSolutions GetInternet - Multiple SQL Injections

GetSolutions GetInternet - Multiple SQL Injections source: https://www.securityfocus.com/bid/11150/info getInternet is vulnerable to multiple remote SQL injection vulnerabilities in the 'welcome.asp', 'checklogin.asp', and 'lostpassword.asp' scripts. These issues are due to a failure of the...

CVE-2004-0652

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods...

Xitami testssi.ssi HTTP Header XSS

The remote Xitami server is distributed with a script for testing server-side includes, '/testssi.ssi'. This script is vulnerable to a cross-site scripting issue when sent a request with a malformed Host or User-Agent header. An attacker may exploit this flaw the steal the authentication...

PostNuke 0.720.75 Reviews Module - Cross-Site Scripting

PostNuke 0.720.75 Reviews Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/10802/info PostNuke is reported prone to a cross-site scripting vulnerability. This issue affects the 'title' parameter of 'Reviews' script. Exploitation of this issue could allow for theft of...

Moodle Help Script 1.x - Cross-Site Scripting

Moodle Help Script 1.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...

[Full-Disclosure] Surgemail - Multiple Vulnerabilities

------------------------------------------------------------ - EXPL-A-2004-002 exploitlabs.com Advisory 028 - ------------------------------------------------------------ - Surgemail - OVERVIEW ======== "SurgeMail is a next generation Mail Server - Combining features, performance and ease of use...

Coppermine Photo Gallery 1.2.2b - theme.php Remote File Inclusion

Coppermine Photo Gallery 1.2.2b - theme.php Remote File Inclusion source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the...

AzDGDatingLite 2.1.1 - 'index.php?language' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile HTML and script code. Exploitation could facilitate thef...

AzDGDatingLite 2.1.1 - view.php?id Cross-Site Scripting

AzDGDatingLite 2.1.1 - view.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/10084/info Multiple cross-site scripting vulnerabilities have been reported in AzDGDatingLite. These issues may be exploited by enticing a victim user to visit a malicious link that includes hostile...

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9873/info It has been reported that YaBB and YaBB SE are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly validate URI supplied user input. Attackers may exploit this vulnerability t...

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9873/info It has been reported that YaBB and YaBB SE are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly validate URI...