DCP-Portal 3.74.x5.x - Multiple HTML Injection Vulnerabilities

DCP-Portal 3.74.x5.x - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/11339/info DCP-Portal is reported prone to multiple HTML injection vulnerabilities. It is reported that DCP-Portal does not sufficiently filter data submitted via input fields in several...

DCP-Portal 3.7/4.x/5.x - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/11339/info DCP-Portal is reported prone to multiple HTML injection vulnerabilities. It is reported that DCP-Portal does not sufficiently filter data submitted via input fields in several scripts. These vulnerabilities may permit execution of hostile scrip...

EZBoard 7.3 - Font Tag HTML Injection

EZBoard 7.3 - Font Tag HTML Injection source: https://www.securityfocus.com/bid/9725/info ezboard is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code encapsulated in font tags of posts to the bulletin board. This code may be...

LiveJournal 1.1 - CSS HTML Injection

LiveJournal 1.1 - CSS HTML Injection source: https://www.securityfocus.com/bid/9727/info LiveJournal is reportedly prone to HTML injection via Cascading Style Sheet CSS tags. It is possible to inject hostile HTML and script code into journal entries through this vulnerability. This could...

Microsoft Internet Explorer 5 - Shell: IFrame Cross-Zone Scripting (1)

source: https://www.securityfocus.com/bid/9628/info It has been alleged that Microsoft Internet Explorer is prone to a weakness that may potentially allow for the execution of hostile script code in the context of the My Computer Zone. This issue is related to how shell: URIs are handled by the...

KnowledgeBuilder 2.0/2.1/3.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/9292/info KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur in the security context of the web server hosting th...