CVE-2005-1800

Cross-site scripting XSS vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php...

jawsXSS.txt

Small XSS Bug in JAWS gadget: Glossary all versions vulnerable 0.3 - 0.5 latest beta beta2 STATUS: The vendor has been contacted and they fixed the bug but they havent released an official patch yet. You can find a provisional patch at the end of the file TECHNICAL INFO...

CVE-2005-1800

Cross-site scripting XSS vulnerability in Jaws Glossary gadget 0.4 to 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter in a view or ViewTerm action to index.php...

[Full-disclosure] XSS Bug in Jaws Glossary Action: ViewTerm ( v 0.4 - 0.5.1 (latest version))

XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...

Jaws Glossary 0.40.5 - Cross-Site Scripting

Jaws Glossary 0.40.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the thef...

Jaws Glossary 0.4/0.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the theft of cookie-based authentication credentials...

Moodle < 1.4.3 Glossary Module SQLi

Binary data 2388.prm...

PostNuke 0.72x Phoenix Glossary Module - SQL Injection

PostNuke 0.72x Phoenix Glossary Module - SQL Injection source: https://www.securityfocus.com/bid/7697/info A vulnerability has been discovered in PostNuke Phoenix v0.723 and earlier. Specifically, the Glossary module fails to sufficiently sanitize user-supplied input, making it prone to SQL...

XOOPS Glossary Module glossaire-aff.php lettre Parameter XSS

There is a cross-site scripting issue in the version of XOOPS installed on the remote host that may allow an attacker to steal your user cookies. The flaw lies in 'glossaire-aff.php'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref : Date: 1 Apr 2003 13:08:28 -0000 From: magistrat To:...