Unfixed XSS vulnerability at www.immosprint.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.immosprint.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It is currently...

MyShoutPro 1.2 Final - Cross-Site Scripting

======================================================================================== | Title : MyShoutPro v1.2 Final Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-I...

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Unfixed XSS vulnerability at us.thqwireless.com

Security researcher xylitol, has submitted on 27/09/2008 a cross-site-scripting XSS vulnerability affecting us.thqwireless.com, which at the time of submission ranked 309472 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is...

Blog:CMS 4.2.1b - SQL Injection Cross-Site Scripting

Blog:CMS 4.2.1b - SQL Injection Cross-Site Scripting Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008...

Unfixed XSS vulnerability at www.epass.com.my

Security researcher DerickTham, has submitted on 13/12/2007 a cross-site-scripting XSS vulnerability affecting www.epass.com.my, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/12/2007. It is currentl...

Unfixed XSS vulnerability at wow.gamepressure.com

Security researcher EKBER, has submitted on 16/11/2007 a cross-site-scripting XSS vulnerability affecting wow.gamepressure.com, which at the time of submission ranked 10790 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2007. It is...

Unfixed XSS vulnerability at www.medikaliniz.com

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.medikaliniz.com, which at the time of submission ranked 9459360 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.southquest.biz

Security researcher BackDoor, has submitted on 09/10/2007 a cross-site-scripting XSS vulnerability affecting www.southquest.biz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is currentl...

CVE-2006-4569

The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting XSS attacks...

BEA WebLogic Server 8.1 / WebLogic Express Administration Console - Cross-Site Scripting

source: https://www.securityfocus.com/bid/13400/info A remote cross-site scripting vulnerability affects BEA WebLogic Server and WebLogic Express administration console. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically...

Yappa-ng 1.x2.x - Cross-Site Scripting

Yappa-ng 1.x2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/13372/info yappa-ng is prone to an unspecified cross-site scripting vulnerability. This issue may allow for theft of cookie-based authentication credentials or other attacks. The vendor has not published any specific...

Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier

GulfTech Security Research December 22nd, 2004 Vendor : Jason Morriss URL : http://www.psychostats.com/ Version : PsychoStats 2.2.4 Beta && Earlier Risk : Cross Site Scripting Description: PsychoStats is a statistics generator for games. Currently there is support for a handful of Half-Life "MODs...

Vulnerabilities in TUTOS

--------------------------------------------------------------------------- Multiple Vulnerabilities in TUTOS --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...

PHPGedView 2.5/2.6 - 'login.php?URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11903/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious...

[SECURITY] [DSA 163-1] New mhonarc packages fix cross site scripting problems

-------------------------------------------------------------------------- Debian Security Advisory DSA 163-1 [email protected] http://www.debian.org/security/ Martin Schulze September 9th, 2002 http://www.debian.org/security/faq -...

Accounts easily compromised on Critical Path web mail service, CP does not respond after 30 days.

Security Advisory: Cross-site scripting vulnerability compromises accounts on Altavista, ICQ, US West/Qwest, others Date 21 August 2000 Author Jeffrey W. Baker, email [email protected] Copyright statement This security advisory is Copyright 2000 by Jeffrey William Baker [email protected]. The advisor...