CommuniMail 1.2 - templates.cgi?form_id Cross-Site Scripting

CommuniMail 1.2 - templates.cgi?formid Cross-Site Scripting source: https://www.securityfocus.com/bid/17602/info CommuniMail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting

Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/17604/info CiscoWorks Wireless LAN Solution Engine WLSE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attack...

Visale 1.0 - pblsmb.cgi?listno Cross-Site Scripting

Visale 1.0 - pblsmb.cgi?listno Cross-Site Scripting source: https://www.securityfocus.com/bid/17598/info Visale is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

Visale 1.0 - 'pblscg.cgi?catsubno' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17598/info Visale is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/17604/info CiscoWorks Wireless LAN Solution Engine WLSE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

PHPLister 0.4.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17591/info phpLister is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the conte...

PHPLister 0.4.1 - index.php Cross-Site Scripting

PHPLister 0.4.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17591/info phpLister is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...

PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17586/info The phpLinks application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting us...

Calendarix 0.7 - YearCal.php Cross-Site Scripting

Calendarix 0.7 - YearCal.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17562/info Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...

Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities

Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17563/info Manila is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

DbbS 2.0 - Multiple Input Validation Vulnerabilities

DbbS 2.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/17559/info DbbS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and command-execution vulnerabilities. These issues are due to a failure in the application...

phpAlbum language.php data_dir Parameter Remote File Inclusion

The remote host is running phpAlbum, an open source web photo gallery written in PHP. The version of phpAlbum installed on the remote host fails to sanitize user-supplied input to the 'datadir' parameter of the 'language.php' script before using it in a PHP 'include' function. Provided PHP's...

DbbS 2.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/17559/info DbbS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and command-execution vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17563/info Manila is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17562/info Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...

Sphider configset.php settings_dir Parameter Remote File Inclusion

The remote host is running Sphider, an open source web spider and search engine written in PHP. The version of Sphider installed on the remote host fails to sanitize user-supplied input to the 'settingsdir' parameter of the 'admin/configset.php' script before using it in a PHP 'include' function...

PHPGuestbook 0.0.2/1.0 - HTML Injection

source: https://www.securityfocus.com/bid/17537/info phpGuestbook is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the...

MODx CMS 0.9.1 - index.php Cross-Site Scripting

MODx CMS 0.9.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17532/info MODxCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in th...

Papoo 2.1.x - print.php Cross-Site Scripting

Papoo 2.1.x - print.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17530/info Papoo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

PlanetSearch + - Planetsearchplus.php Cross-Site Scripting

PlanetSearch + - Planetsearchplus.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17527/info PlanetSearch + is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...