PBLang 4.04.56 Bulletin Board System - IMG Tag HTML Injection

PBLang 4.04.56 Bulletin Board System - IMG Tag HTML Injection source: https://www.securityfocus.com/bid/8286/info PBLang is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code encapsulated in PBLang tags, when posting to the...

PBLang 4.0/4.56 Bulletin Board System - IMG Tag HTML Injection

source: https://www.securityfocus.com/bid/8286/info PBLang is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code encapsulated in PBLang tags, when posting to the bulletin board. Attacker supplied code may be rendered in the web...

Outlook Express plaintext HTML injection

Message content type is determinetd automatically bypassing MIME settings...

e107 Website System 0.554 - HTML Injection

e107 Website System 0.554 - HTML Injection source: https://www.securityfocus.com/bid/8279/info The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and scri...

e107 Website System 0.554 - HTML Injection

source: https://www.securityfocus.com/bid/8279/info The e107 content management system is prone to an HTML injection vulnerability. This issue is exposed through the class2.php script. An attacker may exploit this issue by including hostile HTML and script code in certain fields within the form...

Splatt Forum html injection code in post icon

Any user can inject html code when create a new post. The bug are in the post icon: img src="icon.gif" etc. If you create a personalized form with this code: icon.gif"scriptalert'bug';scriptany tag=" the final code of the post icon is: img src="icon.gif"scriptalert'bug';scriptany tag="" etc. The...

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection source: https://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been...

Splatt Forum 34 - Post Icon HTML Injection

Splatt Forum 34 - Post Icon HTML Injection source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML...

Splatt Forum 3/4 - Post Icon HTML Injection

source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML code. As a result, a malicious user may ha...

CutePHP CuteNews 1.3 - HTML Injection

source: https://www.securityfocus.com/bid/8060/info CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of malicious HTML code...

MegaBook 1.12.02.1 - Multiple HTML Injection Vulnerabilities

MegaBook 1.12.02.1 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/8065/info MegaBook is prone to multiple HTML injection vulnerabilities. This is due to insufficient sanitization of HTML and script code from user-supplied input, including input supplied to the...

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection source: https://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages...

Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection

source: https://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages also known as "Friendly HTTP error messages". Due to some errors...

Synkron.Web 3.0 - HTML Injection

source: https://www.securityfocus.com/bid/7833/info Synkron.web is prone to HTML injection attacks. The vulnerability exists in the search script and is a result of insufficient sanitization of malicious HTML code from user-supplied input. HTML and script code may be echoed back when an existing...

Phorum 3.4.x - Message Form HTML Injection

Phorum 3.4.x - Message Form HTML Injection source: https://www.securityfocus.com/bid/7545/info An HTML injection issue has been reported which may lead to unauthorized code execution. It has been reported that it is possible to inject HTML or script code into the subject and other fields of a...

Web Chat Manager 2.0 - HTML Code Injection

Web Chat Manager 2.0 - HTML Code Injection source: https://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker...

Opera 7 - Image Rendering HTML Injection

Opera 7 - Image Rendering HTML Injection source: https://www.securityfocus.com/bid/6756/info It has been reported that, when generating HTML to display images or embedded media, Opera does not correctly format the provided URL or sufficiently encode URLs to local files. As a result of this lack o...

PHPLinks 2.1.2 - Add Site HTML Injection

PHPLinks 2.1.2 - Add Site HTML Injection source: https://www.securityfocus.com/bid/6632/info phpLinks is prone to HTML injection. phpLinks does not sufficiently sanitized HTML and script code supplied via form fields before displaying this data to administrative users. This issue exists in the...

PHPLinks 2.1.2 - Add Site HTML Injection

source: https://www.securityfocus.com/bid/6632/info phpLinks is prone to HTML injection. phpLinks does not sufficiently sanitized HTML and script code supplied via form fields before displaying this data to administrative users. This issue exists in the 'add.php' script, which is used to add site...

PHP TopSites 2.02.2 - HTML Injection

PHP TopSites 2.02.2 - HTML Injection source: https://www.securityfocus.com/bid/6621/info An HTML injection vulnerability has been discovered in PHP TopSites. The issue occurs due to insufficient sanitization of user-supplied data. By injecting HTML code into the tag of the description page, when...