Information disclosure

boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...

CVE-2005-3237

Cross-site scripting XSS vulnerability in Cyphor 0.19 allows remote attackers to inject arbitrary web script or HTML via the tlogin parameter of footer.php...

Cyphor 0.19 - 'footer.php?t_login' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible...

Utopia News Pro 1.1.3 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15027/info Utopia News Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execut...

CVE-2005-2776

Multiple cross-site scripting XSS vulnerabilities in Looking Glass 20040427 allow remote attackers to inject arbitrary web script or HTML via the 1 versionfullname, 2 versionhomepage, or 3 versionno parameter to footer.php, or the 4 versionfullname, 5 versionno, 6 versionauthor, 7 versionemail...

CVE-2005-2776

CVE-2005-2776: Looking Glass 20040427 is affected by multiple XSS vulnerabilities due to unsanitized input in header.php and footer.php. Attackers can inject arbitrary script via parameters: (1) version[fullname], (2) version[homepage], (3) version[no] to footer.php; and (4) version[fullname], (5...

CVE-2005-1895

Cross-site scripting XSS vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or back parameters to 1 help.php or 2 footer.php...