ScareCrow 2.13 forum.cgi forum Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

XSS in YaWPS 0.61

Advisory: XSS in YaWPS 0.61 Home Page: http://yawps.sourceforge.net/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: topics.cgi, forum.cgi http://www.karadesign.com/cgi-bin/yawps/topics.cgi?op=viewcat;cat=graphics"scriptalert/script"...

CVE-2005-4307: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the forum parameter to 1 forum.cgi and 2 post.cgi, or 3 the user parameter to profile.cgi...