IPortalX blogs.asp Date Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27044/info iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...

Light Weight Calendar index.php date Parameter PHP Code Execution - Ver2 (CVE-2006-0206)

A code execution vulnerability has been reported in Light Weight Calendar. The vulnerability is due to the application does not validating the 'date' variable upon submission to the 'index.php' script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrar...

Syslog Watcher Pro 2.8.0.812 - (Date Parameter) - CSS Vulnerability

Syslog Watcher Pro is a Windows-based syslog server for corporate networks. Syslog Watcher Pro collects, stores, parses, displays and explains syslog information to both new and professional network administrators. Syslog Watcher Prov2.8.0.812 is vulnerable to XSS by 'Date' Parameter of syslog...

Syslog Watcher Pro 2.8.0.812 Cross Site Scripting

Title: Syslog Watcher Pro 'Date' Parameter Cross Site Scripting Vulnerability Software : Syslog Watcher Pro Software Version : v2.8.0.812Jun 15, 2009 Vendor: http://www.snmpsoft.com/ Vulnerability Published : 2013-04-27 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 6.4,...

CVE-2009-4717

Multiple cross-site scripting XSS vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the 1 host parameter to stat/host.php, nodayshow parameter to 2 mostvisitpage.php and 3 visitorduration.php in stat/, 4 nopagesmost parameter to...

CVE-2009-4717

Multiple cross-site scripting XSS vulnerabilities in Gonafish WebStatCaffe allow remote attackers to inject arbitrary web script or HTML via the 1 host parameter to stat/host.php, nodayshow parameter to 2 mostvisitpage.php and 3 visitorduration.php in stat/, 4 nopagesmost parameter to...

CVE-2009-4252

Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4252: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in images.php in Image Hosting Script DPI 1.1 Final 1.1F allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: some of these details are obtained from third party information...

PT-2009-6215 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti version 0.8.7e Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected areas include graph.php, include/top gra...

CVE-2009-3147

Cross-site scripting XSS vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2009-3147

Cross-site scripting XSS vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2009-3147: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2009-1218

Multiple cross-site scripting XSS vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via 1 the fmt-out parameter to login.wcap or 2 the date...

CVE-2009-0610: Improper Control of Generation of Code

Multiple static code injection vulnerabilities in post.php in Simple PHP News 1.0 final allow remote attackers to inject arbitrary PHP code into news.txt via the 1 title or 2 date parameter, and then execute the code via a direct request to display.php. NOTE: the provenance of this information is...

CVE-2008-4756

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2008-4756: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in addprestdate.php in PHP-Daily allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2008-4426

Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...

CVE-2008-4426: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...