Xinha 0.96 - spell-check-savedicts.php Multiple HTML Injection Vulnerabilities

Xinha 0.96 - spell-check-savedicts.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/46825/info Xinha is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML or JavaScript code...

Xinha 0.96 - 'spell-check-savedicts.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/46825/info Xinha is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker ...

WordPress Plugin PhotoSmash Galleries 1.0.x - action Cross-Site Scripting

WordPress Plugin PhotoSmash Galleries 1.0.x - action Cross-Site Scripting source: https://www.securityfocus.com/bid/46782/info The PhotoSmash Galleries WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

Ruubikcms 1.0.3 - 'head.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46794/info RuubikCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin Inline Gallery 0.3.9 - do Cross-Site Scripting

WordPress Plugin Inline Gallery 0.3.9 - do Cross-Site Scripting source: https://www.securityfocus.com/bid/46781/info The Inline Gallery WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit a local file-include vulnerability to obtain potentially sensitive information and execute...

InterPhoto Image Gallery 2.4.2 - 'IPLANG' Local File Inclusion

source: https://www.securityfocus.com/bid/46759/info InterPhoto Image Gallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary...

Support Incident Tracker (SiT!) 3.62 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46671/info Support Incident Tracker SiT! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

xtcModified 1.05 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46681/info xtcModified is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of t...

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities

Interleave 5.5.0.2 - basicstats.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46771/info Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Support Incident Tracker (SiT!) 3.62 - Multiple Cross-Site Scripting Vulnerabilities

Support Incident Tracker SiT! 3.62 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46671/info Support Incident Tracker SiT! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker ma...

Interleave 5.5.0.2 - 'basicstats.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46771/info Interleave is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

VidiScript - vp Cross-Site Scripting

VidiScript - vp Cross-Site Scripting source: https://www.securityfocus.com/bid/46639/info VidiScript is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

HTB22861: XSS in Question and Answer Forum wordpress plugin

Vulnerability ID: HTB22861 Reference: http://www.htbridge.ch/advisory/xssinquestionandanswerforumwordpressplugin.html Product: Question and Answer Forum wordpress plugin Vendor: David Woodford hhttp://trevorpythag.co.uk Vulnerable Version: 1.2.4 Vendor Notification: 15 February 2011 Vulnerability...

WordPress Plugin BackWPup 1.4 - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/46610/info The BackWPup plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to retrieve the contents of an arbitrary file. Informati...

SnapProof - 'retPageID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46622/info SnapProof is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

SnapProof - retPageID Cross-Site Scripting

SnapProof - retPageID Cross-Site Scripting source: https://www.securityfocus.com/bid/46622/info SnapProof is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

glFusion 1.1.x/1.2.1 - 'users.php' SQL Injection

source: https://www.securityfocus.com/bid/46575/info glFusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

phpShop 0.8.1 - page Cross-Site Scripting

phpShop 0.8.1 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/46561/info phpShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in th...

Wordpress GigPress 2.1.10 Plugin Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS Date: 21-2-2011 Author: Saif El-Sherei Version: GigPress 2.1.10, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin Author released an update to fix this issue Inf...