Greenmart < 2.4.3 - Reflected Cross-Site Scripting (XSS)

The greenmartautocompletesearch AJAX action, available to both authenticated and unauthenticated users does not properly sanitise the callback parameter passed to it, resulting in a reflected Cross-Site Scripting issue. Edit WPScanTeam: The vendor 'fixed' the issue for authenticated users by addi...

[SA15009] CityPost Automated Link Exchange &quot;msg&quot; Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: CityPost Automated Link Exchange "msg" Cross-Site...

[SA13202] Aztek Forum Cross-Site Scripting Vulnerabilities

TITLE: Aztek Forum Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13202 VERIFY ADVISORY: http://secunia.com/advisories/13202/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aztek Forum http://secunia.com/product/4254/ DESCRIPTION: benji lemien has...

[SA12840] DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12840 VERIFY ADVISORY: http://secunia.com/advisories/12840/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: DevoyBB 1.x...