PHPXref 0.7 - 'nav.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46302/info PHPXref is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in th...

CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities

CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46275/info CiviCRM is prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46275/info CiviCRM is prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user...

ViArt Shop 4.0.5 Cross Site Scripting

==================================== Vulnerability ID: HTB22814 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinviartshop.html Product: ViArt Shop Vendor: Viart Software http://www.viart.com/ Vulnerable Version: Enterprise v.4.0.5 Vendor Notification: 25 January 2011 Vulnerability...

WebAsyst Shop-Script - Cross-Site Scripting HTML Injection

WebAsyst Shop-Script - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/46250/info WebAsyst Shop-Script is prone to a cross-site-scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in...

UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities

UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46280/info UMI CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Podcast Generator Local File Include and Cross Site Scripting Vulnerabilities

Podcast Generator is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files withi...

ReOS 2.0.5 SQL Injection

Vulnerability ID: HTB22809 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos2.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

HTB22800: Path disclosure in Podcast Generator

Vulnerability ID: HTB22800 Reference: http://www.htbridge.ch/advisory/pathdisclosureinpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: Path disclosure Risk...

Raja Natarajan Guestbook 'lang' Parameter Local File Include Vulnerability

The Raja Natarajan Guestbook is prone to a local file-include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver...

Betsy 4.0 - page Local File Inclusion

Betsy 4.0 - page Local File Inclusion source: https://www.securityfocus.com/bid/46124/info Betsy is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to...

Joomla! v1.5 + v1.6 JFilterInput XSS Bypass

Exploit for php platform in category web applications Exploit Title: Joomla! JFilterInput XSS Bypass Date: 1 February 2011 Author: Jeff Channell Software Link: http://www.joomla.org Version: 1.5.22, 1.6.0 Tested on: PHP5, MySQL5 Joomla! 1.5 and 1.6 rely on the JFilterInput class to sanitize...

TCExam 11.1.16 - user_password Cross-Site Scripting

TCExam 11.1.16 - userpassword Cross-Site Scripting source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/46090/info The TagNinja plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Moodle 2.0.1 - 'PHPCOVERAGE_HOME' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46085/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context ...

vBSEO 3.2.2/3.5.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46068/info vBSEO is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Vanilla Forums 2.0.16 - Target Cross-Site Scripting

Vanilla Forums 2.0.16 - Target Cross-Site Scripting source: https://www.securityfocus.com/bid/46039/info Vanilla Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Vanilla Forums 2.0.16 - 'Target' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46039/info Vanilla Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SimpGB 1.49.2 - 'Guestbook.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46033/info SimpGB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

web@all 1.1 - url Cross-Site Scripting

web@all 1.1 - url Cross-Site Scripting source: https://www.securityfocus.com/bid/45976/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of...