658 matches found
Unfixed XSS vulnerability at www.rapslife.com
Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.rapslife.com, which at the time of submission ranked 4825337 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is current...
Unfixed XSS vulnerability at www.fleetsofanarchy.com
Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.fleetsofanarchy.com, which at the time of submission ranked 1893724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...
Unfixed XSS vulnerability at www.lostcity.cc
Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.lostcity.cc, which at the time of submission ranked 1304718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is currentl...
Unfixed XSS vulnerability at www.hoodwar.com
Security researcher PaPPy, has submitted on 28/04/2008 a cross-site-scripting XSS vulnerability affecting www.hoodwar.com, which at the time of submission ranked 27534080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is current...
Unfixed XSS vulnerability at www.torncity.com
Security researcher PaPPy, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.torncity.com, which at the time of submission ranked 5952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2008. It is currently...
Unfixed XSS vulnerability at battleofthevalley.com
Security researcher PaPPy, has submitted on 04/05/2008 a cross-site-scripting XSS vulnerability affecting battleofthevalley.com, which at the time of submission ranked 410971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/05/2008. It is...
Unfixed XSS vulnerability at www.vecchicompagnidiscuola.it
Security researcher fox91, has submitted on 15/02/2008 a cross-site-scripting XSS vulnerability affecting www.vecchicompagnidiscuola.it, which at the time of submission ranked 421890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. I...
CVE-2007-6554: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 index.php, 2 register.php, 3 login.php, or 4 statistics.php...
CVE-2007-6374
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
CVE-2007-6374
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
CVE-2007-6374
CVE-2007-6374 concerns multiple XSS flaws in Bitweaver 2.0.0 and earlier, exploitable via PATH_INFO in four endpoints: /users/register.php, /search/index.php, /wiki/index.php (editcomments action), and /forums/index.php. The vulnerability allows remote attackers to inject arbitrary script or HTML...
CVE-2007-6374: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...
Cross site scripting
Cross-site scripting XSS vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the 1 name and 2 website parameters to register.php...
CVE-2007-5990: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ExoPHPdesk allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a user profile, possibly the 1 name and 2 website parameters to register.php...
CVE-2003-1466
CVE-2003-1466 affects Phorum 3.4–3.4.2. Unspecified vulnerability allows remote attackers to use Phorum as a proxy to other sites via (1) register.php or (2) login.php, enabling potential abuse of the application as a gateway to external hosts. The provided documents do not include concrete explo...
CVE-2003-1467: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in 1 login.php, 2 register.php, 3 post.php, and 4 common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2003-1466: Undefined Security Weakness
Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via 1 register.php or 2 login.php...
Cross site scripting
Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...
