5 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in pivotx/modules/moduleimage.php in PivotX before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the image parameter...
CVE-2011-0773
PivotX is vulnerable to a Cross-Site Scripting (XSS) flaw in the image parameter of pivotx/modules/module_image.php, affecting PivotX before 2.2.3. The root cause is insufficient sanitization of user-supplied data. The documented impact is remote injection of arbitrary script/HTML. Remediation: u...
PivotX 'module_image.php' Cross Site Scripting Vulnerability
PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PivotX 2.2.2 - module_image.php Cross-Site Scripting
PivotX 2.2.2 - moduleimage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45983/info PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...
CVE-2007-2963
CVE-2007-2963 describes multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB/IP.Board) 2.2.2 and possibly earlier. The issues allow remote attackers to inject arbitrary web script or HTML via specific vectors in the web UI: (1) module_bbcodeloader.php, (2) module_div.p...