WS-2015-0078

Content Spoofing vulnerability in OwnCloud galleryplus Attacker can send his messages directly through url. He can easily put his message on the error message parameter...

mimafoto.se XSS vulnerability

Vulnerable URL: http://www.mimafoto.se/sections/prophoto/key.php?message=...

fotofr.se XSS vulnerability

Vulnerable URL: http://www.fotofr.se/sections/prophoto/key.php?message= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

Multiple Cross-Site Scripting Vulnerabilities in TTChat

TTChat is a suite of professional video entertainment software from TigerTom.Com in the UK. TTChat 1.0.4 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the username parameter msg parameter to defaultphp or...

CVE-2014-5458

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

PT-2014-6488

Name of the Vulnerable Software and Affected Versions php-sqrl affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the message parameter in the sqrl verify.php file. Recommendations At the moment, there is no...

CVE-2014-5458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-4568

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2014-4568: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in posts/videowhisper/rlogout.php in the Video Posts Webcam Recorder plugin 1.55.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2014-5982

Name of the Vulnerable Software and Affected Versions Video Posts Webcam Recorder plugin versions 1.55.4 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the message parameter in the r logout.php file. Recommendations For Vide...

myBloggie 2.1.2/2.1.3 addcat.php errormsg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

PT-2014-4880

Name of the Vulnerable Software and Affected Versions VideoWhisper Webcam plugins for Drupal versions 7.x Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur...

PT-2014-3360

Name of the Vulnerable Software and Affected Versions AlgoSec Firewall Analyzer version 6.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in the BusinessFlow/login endpoint. Recommendations For AlgoS...

CVE-2013-7318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BusinessFlow/login in AlgoSec Firewall Analyzer 6.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

SecurityCenter devform.php message Parameter XSS

The version of Tenable Network Security SecurityCenter installed on the remote host contains the 'devform.php' script. This PHP script is affected by a cross-site scripting vulnerability because the application does not properly validate user-supplied input to the 'message' parameter. An attacker...

PT-2013-5864

Name of the Vulnerable Software and Affected Versions Tenable SecurityCenter versions 4.6 through 4.7 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the message parameter in the devform.php file...

CVE-2013-5911: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5714: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ls/htmlchat.php in the VideoWhisper Live Streaming Integration plugin 4.25.3 and possibly earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 message parameter. NOTE: some of these details are...

PT-2013-5746

Name of the Vulnerable Software and Affected Versions VideoWhisper Live Streaming Integration plugin versions 4.25.3 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the name or message parameter in the ls/htmlchat.php file. This can lead to...

CVE-2013-4098

The CVE-2013-4098 entry concerns DS3 Authentication Server, where ServerAdmin/ErrorViewer.jsp accepts a message parameter that can be used to inject arbitrary error-page text. The public descriptions (NVD, Red Hat, CVE record) repeat this flaw, and an OpenVAS plugin notes DS3 has multiple vulnera...