56 matches found
FotoWeb 6.0 Grid.fwx search Parameter XSS
No description provided by source...
TikiWiki Project 1.8 tiki-view_faq.php faqId Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
GlassFish Application Server resourceNode/customResourceNew.jsf - Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in th...
Netquery 3.1 nqports.php step Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...
Redoable 1.2 Theme header.php s Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24037/info Redoable is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Simple one-file gallery gallery.php f Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploit these issues to steal cookie-based...
ASUS Routers flag Parameter XSS
The remote web server fails to sanitize user-supplied input to the 'flag' parameter of the 'errorpage.htm' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the...
Bugzilla show_bug.cgi id Parameter XSS
The version of Bugzilla installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'showbug.cgi' script. An attacker may be able to leverage this to inject arbitrary HTML and script code...
ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities
Document Title: =============== ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=93 FULL: Discl. Date OSVDB ID CVE ID Creditees Title 2011-09-27 76035 Benjamin Kunz Mejri ServersCheck Monitoring...
Mambo task Parameter XSS
The version of Mambo installed on the remote host does not sanitize input to the 'task' parameter of 'index.php' when 'option' is set to 'comcontent' before using it to generate dynamic HTML. An attacker could leverage this issue to inject arbitrary HTML or script code into a user's browser to be...
OSSIM Framework session/login.php dest Parameter XSS
The remote host is running OSSIM Open Source Security Information Management, a suite of security tools managed by a web-based front-end. The version of OSSIM installed on the remote host fails to sanitize user input to the 'dest' parameter of the 'session/login.php' script before using it to...
SAP Internet Transaction Server < 6.20 Patch 18 wgate urlmime Parameter XSS
Binary data 3753.prm...
PHProxy index.php error Parameter XSS
Binary data 2480.prm...
IlohaMail user Parameter XSS
According to its banner, the remote web server is running IlohaMail version 0.8.10 or earlier. Such versions do not properly sanitize the 'user' parameter before using it to generate dynamic HTML output. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user...
PHP Code Snippet Library index.php Multiple Parameter XSS
The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...