YaPiG 0.95 Cross Site Scripting

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

Classifieds Ads 2.9.1 Cross Site Scripting

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

HTB22962: Multiple XSS in YaPiG

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

Proofpoint Protection Server 5.5.5 - 'process.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47687/info Proofpoint Protection Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

HTB22960: XSS in Daily Maui Photo Widget wordpress plugin

Vulnerability ID: HTB22960 Reference: http://www.htbridge.ch/advisory/xssindailymauiphotowidgetwordpressplugin.html Product: Daily Maui Photo Widget wordpress plugin Vendor: Kris Nelson http://www.webnelly.com/ Vulnerable Version: 0.2 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cro...

Todayu Cross Site Scripting Vulnerability

This host is running Todayu and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtodayuxssvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ Todayu Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 SecPod, http://www.secpod.com This...

HTB22958: XSS in phpGraphy

Vulnerability ID: HTB22958 Reference: http://www.htbridge.ch/advisory/xssinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable Version: 0.9.13b Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Kusaba X Multiple Cross Site Scripting Vulnerabilities

Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

LANSA aXes Web Terminal TN5250 - 'axes_default.css' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47672/info LANSA aXes Web Terminal TN5250 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

TCExam 11.1.29 - 'tce_xml_user_results.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/47762/info TCExam is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...

Tine 2.0 - vbook.php Cross-Site Scripting

Tine 2.0 - vbook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47669/info Tine is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of...

Tine 2.0 - 'vbook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47669/info Tine is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

BackupPC 3.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47628/info BackupPC is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

WordPress Plugin WP Photo Album 1.5.1 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47622/info The WP Photo Album plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Daily Maui Photo Widget 0.2 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Daily Maui Photo Widget 0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47620/info The Daily Maui Photo Widget plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

phpGraphy 0.9.13b - theme_dir Cross-Site Scripting

phpGraphy 0.9.13b - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47634/info phpGraphy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in t...

WordPress Plugin Daily Maui Photo Widget 0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47620/info The Daily Maui Photo Widget plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections

Cisco Unified Communications Manager 8.5 - xmldirectorylist.jsp Multiple SQL Injections source: https://www.securityfocus.com/bid/47607/info Cisco Unified Communications Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before...

html-edit CMS 3.1.x - html_output Cross-Site Scripting

html-edit CMS 3.1.x - htmloutput Cross-Site Scripting source: https://www.securityfocus.com/bid/47576/info html-edit CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

HTB22953: XSS in Max's PHP Photo Album

Vulnerability ID: HTB22953 Reference: http://www.htbridge.ch/advisory/xssinmaxsphpphotoalbum.html Product: Max's PHP Photo Album Vendor: http://www.phpf1.com http://www.phpf1.com Vulnerable Version: 2008-04-01 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...