68 Classifieds 4.1 - 'viewmember.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Proxy List Script - index.php Cross-Site Scripting

Proxy List Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43489/info Proxy List Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

Online Guestbook Pro 5.1 - ogp_show.php Cross-Site Scripting

Online Guestbook Pro 5.1 - ogpshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43689/info Online Guestbook Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...

Linea21 1.2.1 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43711/info Linea21 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Swinger Club Portal - 'start.php?id' SQL Injection

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

DM FileManager 'login.php' Security Bypass Vulnerability

The host is running DM FileManager and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagersecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'login.php' Security Bypass Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

PG Roommate Finder Solution - 'viewprofile.php?part' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35814/info PG Roommate Finder Solution is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with...

Matt Wright FormMail HTTP Response Splitting and XSS Vulnerabilities

FormMail is prone to an HTTP response splitting vulnerability and multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34883/info Claroline is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

GScripts.net DNS Tools RCE Vulnerability (May 2009) - Active Check

GScripts.net DNS Tools is prone to a remote command execution RCE vulnerability because the software fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

CS Whois Lookup 'ip' Parameter Remote Command Execution Vulnerability

CS Whois Lookup and CS DNS Lookup are prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. OpenVAS Vulnerability Test $Id: cswhois34700.nasl 5771...

CS Whois Lookup - 'ip' Remote Command Execution

source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer...

Banner Student System Cross Site Scripting

| | ||| ||| | | | | | || || By: gamr | | | | | | ||| ||| Header Product - Banner Student System by SunGard Specific Page - http://www.EXAMPLE.com/PATH/twbkwbis.PSecurityQuestion Change Security Question Version - 7.4 / earlier versions could be effected also Product URL -...

Atlassian JIRA < 3.13.3 DWR 'c0-id' XSS

The Atlassian JIRA installation hosted on the remote web server is affected by a cross-site scripting XSS vulnerability due to a failure to sanitize input to the 'c0-id' parameter during a DWR call. A remote attacker, using a crafted URL, can exploit this to execute JavaScript in a user's browser...

Arcadwy Arcade Script (username) Static XSS Vulnerability

No description provided by source. \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. \/ ! EXPLOIT...

Arcadwy Arcade Script (username) Static XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Arcadwy Arcade Script username Static XSS Vulnerability ========================================================= \ Information Script : Arcadwy Arcade Script CMS Buy/Download :...

Arcadwy Arcade Script - Username Static Cross-Site Scripting

Arcadwy Arcade Script - Username Static Cross-Site Scripting \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s,...