cPanel WebHost Manager 3.1 - addon_configsupport.cgi?supporturl Cross-Site Scripting

cPanel WebHost Manager 3.1 - addonconfigsupport.cgi?supporturl Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

cPanel WebHost Manager 3.1 - park?ndomain Cross-Site Scripting

cPanel WebHost Manager 3.1 - park?ndomain Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

MMGallery 1.55 - Thumbs.php Cross-Site Scripting

MMGallery 1.55 - Thumbs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21281/info The mmgallery script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

MMGallery 1.55 - 'Thumbs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21281/info The mmgallery script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21278/info Simple PHP Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Simple PHP Gallery 1.1 - System SP_Index.php Cross-Site Scripting

Simple PHP Gallery 1.1 - System SPIndex.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21278/info Simple PHP Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

a-ConMan 3.2b - common.inc.php Remote File Inclusion

a-ConMan 3.2b - common.inc.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...

a-ConMan <= 3.2b (common.inc.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== a-ConMan = 3.2b common.inc.php Remote File Inclusion Vulnerability ===================================================================== \ /\ \ / | \ \ | / \ // / | \ |...

My Little Weblog 2006.11.21 - Weblog.php Cross-Site Scripting

My Little Weblog 2006.11.21 - Weblog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21238/info My Little Weblog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input to the 'action' parameter of the 'weblog.php' script...

BirdBlog 1.4 - adminentries.php?month Cross-Site Scripting

BirdBlog 1.4 - adminentries.php?month Cross-Site Scripting source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

BirdBlog 1.4 - '/admin/admincore.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

Rapid Classified 3.1 - 'view_print.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21173/info BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...

DoSePa 1.0.4 - textview.php Information Disclosure

DoSePa 1.0.4 - textview.php Information Disclosure Target: DoSePa 1.0.4 textview.php http://sourceforge.net/project/showfiles.php?groupid=91686 Vulnerability: Information disclosure. Description: The textview.php page in DoSePa does not properly sanitize the $GET'file' value; this allows an...

vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities

vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21157/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker could exploi...

vBulletin 3.6.x - Admin Control Panel Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21157/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker could exploit this vulnerability to have arbitrary script code execute in the context of the...

b2evolution 1.8.21.9 - _404_not_found.page.php Multiple Cross-Site Scripting Vulnerabilities

b2evolution 1.8.21.9 - 404notfound.page.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

b2evolution 1.8.21.9 - _referer_spam.page.php Multiple Cross-Site Scripting Vulnerabilities

b2evolution 1.8.21.9 - refererspam.page.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

Odysseus Blog 1.0 - blog.php Cross-Site Scripting

Odysseus Blog 1.0 - blog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21128/info Odysseus Blog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...