Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2007-5932

CVE-2007-5932 describes multiple cross-site scripting (XSS) vulnerabilities in Fatwire Content Server (CS) CMS 6.3.0, allowing remote attackers to inject arbitrary script or HTML via unspecified fields related to the search function and advanced search function (and possibly other components). Th...

CVE-2007-5932: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...

CVE-2006-3679

FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...

CVE-2006-3679

CVE-2006-3679 affects FatWire Content Server 5.5.0. The vulnerability allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process. According to the NVD entry, exploitation requires no authentication (netwo...

CVE-2006-3679: Undefined Security Weakness

FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...

[Full-disclosure] S21Sec-032-en: Vulnerability in Fatwire Content Server

S21Sec Advisory - Title: FatWire Content Server ID: S21SEC-032-en Severity: High - Administrative Privileges Escalation History: 31.May.2006 Vulnerability discovered 05.Jun.2006 Fixed patch available Scope: FatWire Content Server Portal Platforms: Any Author: Alberto Moro [email protected] URL:...

CVE-2005-4576

Multiple cross-site scripting XSS vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 COUNTRYNAME, 2 EMAIL, and 3 FUELAPTEMPLATENAME parameters...

CVE-2005-4576

CVE-2005-4576 affects Fatwire UpdateEngine (UpdateEngine) 6.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws exploitable via the parameters COUNTRYNAME, EMAIL, and FUELAP_TEMPLATENAME, allowing remote attackers to inject arbitrary web script or HTML. The available doc...

CVE-2005-4576

Multiple cross-site scripting XSS vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 COUNTRYNAME, 2 EMAIL, and 3 FUELAPTEMPLATENAME parameters...

CVE-2005-4576: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the UpdateEngine program in Fatwire UpdateEngine 6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 COUNTRYNAME, 2 EMAIL, and 3 FUELAPTEMPLATENAME parameters...

FatWire UpdateEngine 6.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16073/info FatWire UpdateEngine is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may...

Fatwire UpdateEngine 6.2 multiple XSS vuln.

Fatwire UpdateEngine 6.2 multiple XSS vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html vendor:http://www.fatwire.com/ affected version:6.2 and prior Product Description: UpdateEngine6 is a dynamic...