56 matches found
osCommerce 2.2 admin/tax_rates.php page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
Yblog tem.php action Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20280/info Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in...
Netquery 3.1 nqports.php step Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...
FotoWeb 6.0 Grid.fwx search Parameter XSS
No description provided by source...
Simple one-file gallery gallery.php f Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploit these issues to steal cookie-based...
GlassFish Application Server resourceNode/customResourceNew.jsf - Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...
ASUS Routers flag Parameter XSS
The remote web server fails to sanitize user-supplied input to the 'flag' parameter of the 'errorpage.htm' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the...
Bugzilla show_bug.cgi id Parameter XSS
The version of Bugzilla installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'showbug.cgi' script. An attacker may be able to leverage this to inject arbitrary HTML and script code...
ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities
Document Title: =============== ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=93 FULL: Discl. Date OSVDB ID CVE ID Creditees Title 2011-09-27 76035 Benjamin Kunz Mejri ServersCheck Monitoring...
Mambo task Parameter XSS
The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...
OSSIM Framework session/login.php dest Parameter XSS
The remote host is running OSSIM Open Source Security Information Management, a suite of security tools managed by a web-based front-end. The version of OSSIM installed on the remote host fails to sanitize user input to the 'dest' parameter of the 'session/login.php' script before using it to...
SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS
Binary data 3753.prm...
PHProxy index.php error Parameter XSS
Binary data 2480.prm...
IlohaMail user Parameter XSS
According to its banner, the remote web server is running IlohaMail version 0.8.10 or earlier. Such versions do not properly sanitize the 'user' parameter before using it to generate dynamic HTML output. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user...
PHP Code Snippet Library index.php Multiple Parameter XSS
The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...