Rumba XML 2.4 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

ArtGK CMS - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42923/info ArtGK CMS is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

CGI Generic HTML Injections (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML to be executed in a user's browser within the security context of the affected site. The remote web server...

Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities

Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

File Content Disclosure in TCMS

Vulnerability ID: HTB22579 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: File Content Disclosure...

BlastChat Client 3.3 - Cross-Site Scripting

BlastChat Client 3.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/42734/info BlastChat Client is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Auto CMS 1.6 - autocms.php Cross-Site Scripting

Auto CMS 1.6 - autocms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42764/info Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

XSS vulnerability in MAXdev

Vulnerability ID: HTB22563 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmaxdev.html Product: MAXdev Vendor: MAXdev http://www.maxdev.it/ Vulnerable Version: 1.0.83 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

Auto CMS 1.6 - 'autocms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42764/info Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Syntax Highlighter 3.0.83 - index.html HTML Injection

Syntax Highlighter 3.0.83 - index.html HTML Injection source: https://www.securityfocus.com/bid/42572/info Syntax Highlighter is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits...

Joomla! Component com_fireboard - Itemid SQL Injection

Joomla! Component comfireboard - Itemid SQL Injection source: https://www.securityfocus.com/bid/42460/info The 'comfireboard' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

SQL injection vulnerability in CMS Source

Vulnerability ID: HTB22546 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmssource.html Product: CMS Source Vendor: Proud Daddy Web Design http://www.prouddaddy.net/ Vulnerable Version: Current at 28.07.2010 and Probably Prior Versions Vendor Notification: 28 July 2010...

XSS vulnerability in Mystic

Vulnerability ID: HTB22534 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmystic.html Product: Mystic Vendor: Hulihan Applications http://hulihanapplications.com/projects/mystic Vulnerable Version: 0.1.4 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Typ...

Mystic 0.1.4 Cross Site Request Forgery / Cross Site Scripting

=============================================== Vulnerability ID: HTB22533 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinmystic.html Product: Mystic Vendor: Hulihan Applications http://hulihanapplications.com/projects/mystic Vulnerable Version: 0.1.4 and Probably Prior Versions Vendor...

Apache JackRabbit 2.0.0 XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

Edit-X PHP CMS - 'search_text' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42442/info Edit-X PHP CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Clearsite 'header.php' Remote File Include Vulnerability

Clearsite is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. OpenVAS Vulnerability Test $Id:...

MybbCentral TagCloud 2.0 - 'Topic' HTML Injection

source: https://www.securityfocus.com/bid/42406/info TagCloud is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the...

Nasim Guest Book - page Cross-Site Scripting

Nasim Guest Book - page Cross-Site Scripting source: https://www.securityfocus.com/bid/42503/info Nasim Guest Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...