CVE-2008-1283

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

Cross site scripting

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

CVE-2008-1283

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

CVE-2008-1283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page...

Neptune Web Server crossite scripting

Crossite scriptign with error page...

XSS in Neptune Web Server

//////XSS in Neptune Web Server //404 error page is vulnerable to XSS //http://www.silver-forge.com/ // //////Tested on: //Neptune Web Server 3.0 Professional Edition // ////////Author: //NetJackal //http://netjackal.by.ru //http://hackerz.ir // ////////PoC: //http://victim.net/XSS...

CVE-2008-0146

Cross-site scripting XSS vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the top-level URI...

CVE-2008-0146: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the top-level URI...

w3msql-xss.txt

A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...

xss in w3-msql error page

A reflected xss flaw exists in the w3-msql error page. google dork : "W3-mSQL Error! - Can't stat script file /" Just insert a script from the start of / like if u get a URL like:- http://localhost/cgi-bin/w3-msql/journal/ijcd/index.html and the error page output as :- W3-mSQL Error! - Can't stat...

Adult Script 1.6.5 - Multiple SQL Injections

Adult Script 1.6.5 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

CVE-2002-2418

Cross-site scripting XSS vulnerability in acFreeProxy aka acFP 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page...

CVE-2002-2418

CVE-2002-2418 describes an XSS vulnerability in acFreeProxy (acFP) 1.33 beta 7 where a crafted URL is inserted into an error page, allowing arbitrary script/HTML execution. Impact: partial integrity with no confidentiality/availability impact stated; attack surface is remote over a network with n...

CVE-2002-2418: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in acFreeProxy aka acFP 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page...

CVE-2002-2378

Cross-site scripting XSS vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon : in the query string, which is inserted into the resulting error page...

CVE-2002-2378: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon : in the query string, which is inserted into the resulting error page...

Cross site scripting

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

CVE-2007-5562

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

CVE-2002-2246

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2002-2246: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header HTTPREFERER to a non-existent page, which is injected into the resulting 404 error page...