574 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3196
Cross-site scripting XSS vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter...
CVE-2009-3194
Cross-site scripting XSS vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3196
The CVE-2009-3196 entry documents a cross-site scripting (XSS) vulnerability in the PHP Video Script by JCE-Tech, specifically in index.php, where an attacker can inject arbitrary web script or HTML via the key parameter. The affected component is the index.php of JCE-Tech PHP Video Script; root ...
CVE-2009-3198
The CVE-2009-3198 is an XSS vulnerability in the JCE-Tech Affiliate Master Datafeed Parser Script 2.0, affecting its search.php where the search parameter can inject arbitrary web script/HTML. This is a remote issue with a cross-site scripting impact described in multiple sources (NVD, Red Hat, C...
CVE-2009-3195
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
CVE-2009-3197
CVE-2009-3197 describes a cross-site scripting (XSS) vulnerability in the PHP Calendars Script by JCE-Tech, specifically in search.php. The flaw lets remote attackers inject arbitrary web script or HTML by supplying a crafted value to the search parameter. The NVD metrics indicate a MEDIUM-severi...
CVE-2009-3195
CVE-2009-3195 affects JCE-Tech Auction RSS Content Script 3.0 with multiple XSS vulnerabilities that allow remote injection of arbitrary script/HTML via the id parameter to rss.php and search.php. The description specifies client-side impact (arbitrary script injection) but does not provide in-do...
CVE-2009-3194
Cross-site scripting (XSS) vulnerability identified as CVE-2009-3194 affects the JCE-Tech SearchFeed Script’s index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. Public references in the NVD entry indicate an XSS with a base score of 4.3 (...
CVE-2009-3198
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3198: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech Affiliate Master Datafeed Parser Script 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3196: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arbitrary web script or HTML via the key parameter...
CVE-2009-3194: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3197: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in JCE-Tech PHP Calendars Script allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2009-3195: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rss.php and 2 search.php...
JCE-Tech PHP Video Script - index.php Cross-Site Scripting
JCE-Tech PHP Video Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting
JCE-Tech SearchFeed Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execut...
JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...
Default configuration
The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Extension JCE key sizes to 128 bits, which makes it easier for attackers to decrypt ciphertext produced by JCE...