CVE-2013-2504

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-2504: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 aka 5.33.946.0 allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2013-3827

Name of the Vulnerable Software and Affected Versions Matrix42 Service Store version 5.3 SP3 aka 5.33.946.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the query string in the SPS/Portal/default.aspx page of the Service...

CVE-2013-4716

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

Cross site scripting

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-4716

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2013-4716: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Tattyan HP TOWN 593 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string...

PT-2013-5159

Name of the Vulnerable Software and Affected Versions Tattyan HP TOWN versions 5 9 3 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the query string, which can lead to cross-site scripting XSS attacks. Recommendations For versions 5 9 3 and...

PT-2013-5586

Name of the Vulnerable Software and Affected Versions Cisco MediaSense affected versions not specified Description The issue affects the web interface in Cisco MediaSense, where it fails to properly protect the client-server communication channel. This allows remote attackers to obtain sensitive...

CVE-2013-5502: Undefined Security Weakness

The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspecified vectors, aka Bug ID CSCuj23344...

PHP < 5.3.12 / 5.4.x < 5.4.2 CGI Query String Code Execution

Binary data 6993.prm...

DEBIAN-CVE-2013-2204

moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a pound sign character during extraction of the QUERYSTRING, which allows remote attackers to pass arbitrary parameters to a Flash...

Spoofing

moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a pound sign character during extraction of the QUERYSTRING, which allows remote attackers to pass arbitrary parameters to a Flash...

PT-2013-3594

Name of the Vulnerable Software and Affected Versions Moxiecode moxieplayer versions prior to 3.5.2 Description The issue allows remote attackers to pass arbitrary parameters to a Flash application and conduct content-spoofing attacks by crafting a string after a ? question mark character, due to...

csrf

This plugin finds Cross Site Request Forgeries csrf vulnerabilities. The simplest type of csrf is checked to be vulnerable, the web application must have sent a permanent cookie, and the aplicacion must have query string parameters. Plugin type Audit Options This plugin doesnt have any user...

CVE-2013-0143

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string...

CVE-2013-0143

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string...

PT-2013-2129

Name of the Vulnerable Software and Affected Versions QNAP VioStor NVR devices version 4.0.3 QNAP NAS affected versions not specified, specifically in the Surveillance Station Pro component Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by...

CVE-2013-0143: Improper Control of Generation of Code

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string...

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability

Summary Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and abuse. Description Securimage suffers from a XSS issue in 'exampleform.php' that uses the 'REQUESTURI' variable. The vulnerability is present because there...