Exponent CMS 0.97.0 Cross Site Scripting

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

Exponent CMS 0.97 - Slideshow.js.php Cross-Site Scripting

Exponent CMS 0.97 - Slideshow.js.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4744

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4744

The CVE-2009-4744 entry describes a cross-site scripting (XSS) vulnerability in the Contact module of Exponent CMS 0.97-GA20090213, exploitable via the email parameter to inject arbitrary script/HTML. The issue is remote in nature and could allow user-interface manipulation through crafted input....

CVE-2009-4744

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4744: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Exponent CMS 0.96.3 SQL Injection

Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Download Script: http://www.exponentcms.org/install/upgrades/exponent-0.97.0-Beta20080611.zip Dork: "Welcome to...

Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability

No description provided by source. Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site" inurl:articlemodule ==...

Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability =============================================================== Script : exponentcms Dork: "Welcome to Exponent...

Exponent CMS 0.96.3 - articlemodule SQL Injection

Exponent CMS 0.96.3 - articlemodule SQL Injection Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site"...

Exponent CMS 0.96.3 - 'articlemodule' SQL Injection

Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site" inurl:articlemodule === Exploit ===...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

CVE-2008-1972

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

CVE-2008-1972

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

CVE-2008-1972

Exponent CMS 0.96.6-GA20071003 and earlier is affected by multiple XSS vulnerabilities in the user account creation feature when Allow Registration is enabled. Remote attackers can inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields...

CVE-2008-1972: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and b magpiesimple.php in external/magpierss/scripts/, the 2 rssurl parameter to c magpieslashbox.p...

CVE-2007-2337

Multiple cross-site scripting XSS vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and b magpiesimple.php in external/magpierss/scripts/, the 2 rssurl parameter to c magpieslashbox.p...