Adobe ColdFusion Server <= 8.0.1 wizards/common/_logintowizard.cfm Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

Psunami Bulletin Board 0.x Psunami.CGI Remote Command Execution Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote...

Super Site Searcher Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5605/info Super Site Searcher is prone to remote command execution. Shell metacharacters are not adequately filtered from query string parameters in a request to the vulnerable search engine script. The parameters are the...

Foxit Reader <= 5.4.4.1128 Firefox Plugin npFoxitReaderPlugin.dll Stack Buffer Overflow

No description provided by source. ?php / Foxit Reader = 5.4.4.1128 Plugin for Firefox npFoxitReaderPlugin.dll Overlong Query String Remote Stack Buffer Overflow PoC --------------------------- rgod listener Tested against Microsoft Windows Mozilla Firefox 17.0.1 Foxit Reader 5.4.3.0920 Foxit...

Adobe ColdFusion Server <= 8.0.1 administrator/enter.cfm Query String XSS

No description provided by source. source: http://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

SWSoft ASPSeek 1.0 s.cgi Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2492/info A buffer overflow in ASPSeek versions 1.0.0 through to 1.0.3 allows for arbitrary code execution with the privileges of the web server. The vulnerable script is s.cgi and the buffer overflow can be accessed by...

PT-2014-4741

Name of the Vulnerable Software and Affected Versions EMC Documentum Digital Asset Manager DAM versions 6.5 SP3 through 6.5 SP6 before P13 Description The issue allows remote attackers to conduct Documentum Query Language DQL injection attacks, bypassing intended restrictions on querying objects...

CVE-2014-2503: Improper Input Validation

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

PT-2014-2999

Name of the Vulnerable Software and Affected Versions Bradesco Gateway plugin version 2.0 for Wordpress Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploited via the QUERY...

PT-2014-2183

Name of the Vulnerable Software and Affected Versions SilverStripe versions prior to 2.3.13 SilverStripe versions 2.4.x prior to 2.4.6 Description A cross-site scripting XSS issue exists due to insufficient input validation in the process function within SSViewer.php. This allows remote attackers...

CVE-2013-0201

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.5, 4.0.10, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to core/lostpassword/templates/resetpassword.php, 2 mime parameter to apps/files/ajax/mimeicon.php, or 3 token parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...

PT-2014-2610

Cross-site scripting XSS vulnerability in the Brother MFC-9970CDW printer with firmware G 1.03 and L 1.10 allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name QUERY STRING to admin/admin main.html, a different vulnerability than CVE-2013-2507 and...

PT-2014-2579

Name of the Vulnerable Software and Affected Versions Batavi version 1.2.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING to "admin/index.php". This could potentially lead to unauthorized actions on the affected...

PT-2014-2130 · Red Hat · Spacewalk

Name of the Vulnerable Software and Affected Versions: Spacewalk version 1.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QueryString to the "SystemGroupList.do" page. This could potentially lead to unauthorized actions on th...

Cross site scripting

Cross-site scripting XSS vulnerability in e107plugins/content/handlers/contentpreset.php in e107 before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-2750: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in e107plugins/content/handlers/contentpreset.php in e107 before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2014-2627

Name of the Vulnerable Software and Affected Versions e107 versions prior to 1.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the query string. This is due to a vulnerability in the content preset.php file within the e107...

Cross site scripting

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...