Claroline 1.10 - Multiple HTML Injection Vulnerabilities

Claroline 1.10 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/47073/info Claroline is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploi...

OrangeHRM 2.6.2 - jobVacancy.php Cross-Site Scripting

OrangeHRM 2.6.2 - jobVacancy.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47046/info OrangeHRM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverag...

netjukebox 'skin' Parameter Cross Site Scripting Vulnerability

netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

netjukebox 4.01B5.25 - skin Cross-Site Scripting

netjukebox 4.01B5.25 - skin Cross-Site Scripting source: https://www.securityfocus.com/bid/47027/info netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage th...

netjukebox 4.01B/5.25 - 'skin' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47027/info netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Newsportal 0.37 - post.php Cross-Site Scripting

Newsportal 0.37 - post.php Cross-Site Scripting source: https://www.securityfocus.com/bid/46961/info NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage thi...

PluggedOut Blog 1.9.9 - 'year' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46962/info PluggedOut Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in...

PluggedOut Blog 1.9.9 - year Cross-Site Scripting

PluggedOut Blog 1.9.9 - year Cross-Site Scripting source: https://www.securityfocus.com/bid/46962/info PluggedOut Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...

Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Ruubikcms 1.0.3 - head.php Cross-Site Scripting

Ruubikcms 1.0.3 - head.php Cross-Site Scripting source: https://www.securityfocus.com/bid/46794/info RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...

WebAsyst Shop-Script - Cross-Site Scripting HTML Injection

WebAsyst Shop-Script - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/46250/info WebAsyst Shop-Script is prone to a cross-site-scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in...

ImpressCMS 1.2.x - quicksearch_ContentContent HTML Injection

ImpressCMS 1.2.x - quicksearchContentContent HTML Injection source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...

ImpressCMS 1.2.x - 'quicksearch_ContentContent' HTML Injection

source: https://www.securityfocus.com/bid/45541/info ImpressCMS is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Webmedia Explorer HTML Injection Vulnerability

Webmedia Explorer is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentiall...

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection

sNews 1.7 - snews.php Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

sNews 1.7 - 'snews.php' Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

PluXml 5.0.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities

Ronny CMS 1.1 r935 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/44066/info Ronny CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

PluXml 5.0.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/44069/info PluXml is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTM...