CVE-2011-10011

WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary PHP code, resulting in persistent remot...

CVE-2011-10011 WeBid 1.0.2 converter.php Remote PHP Code Injection

WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary PHP code, resulting in persistent remot...

osCSS 'page' Parameter Cross Site Scripting Vulnerability

The host is running osCSS and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoscssxssvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ osCSS 'page' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 SecPod,...

CVE-2010-2856

CVE-2010-2856 affects osCSS (1.2.2 and probably earlier). The vulnerability is a cross-site scripting (XSS) flaw in the admin/currencies.php script, exploitable via the page parameter to inject arbitrary HTML/JS into a user’s browser. OpenVAS entries corroborate an XSS vulnerability in osCSS

CVE-2010-2856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows remote attackers to inject arbitrary web script or HTML via the page parameter...