CVE-2006-0251

Cross-site scripting XSS vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the 1 duration, 2 file, and 3 cmd parameters...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

CVE-2002-2011

Cross-site scripting XSS vulnerability in the fom CGI program fom.cgi in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter...

CVE-2002-2011

The CVE-2002-2011 entry concerns Faq-O-Matic’s fom.cgi (versions 2.711 and 2.712). The issue is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the file parameter, potentially enabling/script execution in the victim’s browser. Documented im...

Faq-O-Matic fom.cgi Multiple Parameter XSS

The remote host runs Faq-O-Matic, a CGI-based system that automates the process of maintaining a FAQ. The remote version of this software is vulnerable to cross-site scripting attacks in the script 'fom.cgi'. With a specially crafted URL, an attacker can cause arbitrary code execution resulting i...

Debian DSA-109-1 : faqomatic - XSS vulnerability

Due to unescaped HTML code Faq-O-Matic returned unverified scripting code to the browser. With some tweaking this enables an attacker to steal cookies from one of the Faq-O-Matic moderators or the admin. Cross-Site Scripting is a type of problem that allows a malicious person to make another pers...

CVE-2002-2011

Cross-site scripting XSS vulnerability in the fom CGI program fom.cgi in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter...

CVE-2002-0230

Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message...

CVE-2002-0230

CVE-2002-0230 covers a cross-site scripting (XSS) flaw in Faq-O-Matic’s fom.cgi (v2.712) that allows an attacker to inject arbitrary Javascript on other clients via the cmd parameter. Multiple connected sources corroborate an XSS issue in Faq-O-Matic, with OpenVAS and Tenable plugins referencing ...

CVE-2002-0230

Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message...

[SECURITY] [DSA 109-1] New Faq-O-Matic packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 109-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : faqomatic...

[SECURITY] [DSA 109-1] New Faq-O-Matic packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 109-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2002 - -------------------------------------------------------------------------- Package : faqomatic...

Межсайтовый скриптинг в FAQ-O-Matic (crossite scripting)

http://faqomaticsite/cgi-bin/fom/fom.cgi?cmd=scriptalert"superpetz"/script&file=1&keywords=superpetz...

[SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability]

SUPERPETZ ADVISORY 002- Faq-O-Matic Cross-Site Scripting Vulnerability // + : : ++ :o:+++ -/++ / / collect them all! this one is a lynx!! TITLE: Faq-O-Matic Cross-Site Scripting Vulnerability ----- discovery date: February 1st, 2002 -------------- publication date: February 4th, 2002...

Faq-O-Matic 2.62.7 - Cross-Site Scripting

Faq-O-Matic 2.62.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4023/info FAQ-O-Matic is a freely available, open-source FAQ Frequently Asked Questions manager. It is intended to run on Linux and Unix variants. FAQ-O-Matic does not sufficiently filter script code from URL...