PowerPortal 1.1/1.3 Private Message HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10835/info A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data...

CVE-2006-5169

Cross-site scripting XSS vulnerability in John Himmelman aka DaRk2k1 PowerPortal 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to registering a user. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-5169

CVE-2006-5169 is an XSS vulnerability in PowerPortal 1.1 (attributed to John Himmelman/aka DaRk2k1). The connected records specify that remote attackers can inject arbitrary script or HTML via unspecified vectors, possibly related to user registration. There is no explicit exploit code or in-the-...