Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting

Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting source: https://www.securityfocus.com/bid/8573/info A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values. An attacker could explo...

Ezboard - invitefriends.php3 Cross-Site Scripting

Ezboard - invitefriends.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/8519/info The 'invitefriends.php3' script of Ezboard has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on user-supplied URI...

Ezboard - 'invitefriends.php3' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8519/info The 'invitefriends.php3' script of Ezboard has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on user-supplied URI parameters. This issue could be exploited to cause hosti...

TSguestbook 2.1 - Message HTML Injection

TSguestbook 2.1 - Message HTML Injection source: https://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, ...

SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Cross-Site Scripting

SAP Internet Transaction Server 4620.2.0.323011 Build 46B.323011 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8517/info The 'wgate.dll' componenet of SAP Internet Transaction Server has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of...

AldWeb MiniPortail 1.92.x - LNG Cross-Site Scripting

AldWeb MiniPortail 1.92.x - LNG Cross-Site Scripting source: https://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code ...

AldWeb MiniPortail 1.9/2.x - 'LNG' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8504/info cross-site scripting vulnerability has been reported for miniPortail. The vulnerability exists due to insufficient sanitization of some user-supplied values. Specifically, malicious HTML code is not sanitized from a URI parameter passed to...

Xoops 1.0/1.3.x - BBCode HTML Injection

source: https://www.securityfocus.com/bid/8414/info Xoops BBCode has been reported prone to an HTML injection vulnerability. It has been reported that an attacker may inject malicious script into areas of Xoops where BBCode is rendered. This issue is due to a lack of sufficient sanitization...

Invision Power Board (IP.Board) 1.01.11.2 - admin.php Cross-Site Scripting

Invision Power Board IP.Board 1.01.11.2 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/8381/info Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed b...

Invision Power Board (IP.Board) 1.0/1.1/1.2 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8381/info Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in an Invision Power Board script on user-influenced URI...

Savant Web Server 3.1 - CGITest.HTML Cross-Site Scripting

Savant Web Server 3.1 - CGITest.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/8242/info cgitest.html has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on data supplied to the cgitest.html script. This...

Savant Web Server 3.1 - CGITest.HTML Cross-Site Scripting

source: https://www.securityfocus.com/bid/8242/info cgitest.html has been reported prone to cross-site scripting attacks. The issue occurs due to a lack of sufficient sanitization performed on data supplied to the cgitest.html script. This issue could be exploited to cause hostile HTML and script...

CutePHP CuteNews 1.3 - HTML Injection

CutePHP CuteNews 1.3 - HTML Injection source: https://www.securityfocus.com/bid/8060/info CutePHP is prone to HTML injection attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to news posts are not sufficiently sanitized of...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

BRS Webweaver 1.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when...

iXmail 0.2/0.3 - 'iXmail_NetAttach.php' File Deletion

source: https://www.securityfocus.com/bid/8046/info A vulnerability has been reported for iXmail that may allow for the deletion of files. The vulnerability occurs due to insufficient sanitization of user-supplied input for certain URI parameters...

BRS Webweaver 1.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/8037/info BRS WebWeaver is prone to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, BRS WebWeaver includes user requests when generating error pages. Exploitation could permit a...

WebJeff FileManager 1.6 - File Disclosure

WebJeff FileManager 1.6 - File Disclosure source: https://www.securityfocus.com/bid/7995/info A vulnerability has been reported for Filemanager that may result in the disclosure of arbitrary files. The vulnerability exists due to insufficient sanitization of user-supplied values for URI parameter...

WebJeff FileManager 1.6 - File Disclosure

source: https://www.securityfocus.com/bid/7995/info A vulnerability has been reported for Filemanager that may result in the disclosure of arbitrary files. The vulnerability exists due to insufficient sanitization of user-supplied values for URI parameters. A malicious attacker can specify...

SurfControl Web Filter 4.2.0.1 - File Disclosure

SurfControl Web Filter 4.2.0.1 - File Disclosure source: https://www.securityfocus.com/bid/7978/info A problem with Web Filter may allow attackers to obtain access to sensitive files. The vulnerability occurs due to insufficent sanitization of '.../' directory traversal sequences...

pMachine 1.0/2.x - Search Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization performed on user-supplied data that is passed as the query...