DiscusWare Discus 3.10 Error Message Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16119/info DiscusWare Discus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

CVE-2006-0073

CVE-2006-0073 is an XSS vulnerability reported for DiscusWare Discus Freeware 3.10.5 and Discus Freeware Professional 3.10.4. The issue arises because the application does not properly sanitize unsanitized data in the URL before including it in an error message, enabling remote attackers to injec...