Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability. CVE-2007-6090. Webapps exploit for php platform source: http://www.securityfocus.com/bid/26458/info Nuked-Klan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize...

IBM Websphere Application Server 5.1.1 - WebContainer HTTP Request Header Security

IBM Websphere Application Server 5.1.1 - WebContainer HTTP Request Header Security source: https://www.securityfocus.com/bid/26457/info IBM WebSphere Application Server is prone to a security weakness regarding an HTTP request header. The software fails to sanitize a certain HTTP header when the...

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete...

WordPress Plugin WP-SlimStat 0.9.2 - Cross-Site Scripting

WordPress Plugin WP-SlimStat 0.9.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/26432/info WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

XOOPS 2.2.5 - register.php Cross-Site Scripting

XOOPS 2.2.5 - register.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26835/info XOOPS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

X7 Chat 2.0.4 - 'frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

X7 Chat 2.0.4 - frame.php Cross-Site Scripting

X7 Chat 2.0.4 - frame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

Thomson SpeedTouch 716 - 'URL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26808/info Thomson SpeedTouch 716 is prone to a cross-site scripting vulnerability because the device fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26807/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the...

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting

Computer Associates SiteMinder - Web Agent Smpwservices.FCC Cross-Site Scripting source: https://www.securityfocus.com/bid/26375/info Computer Associates SiteMinder Web Agent is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

IBM WebSphere Application Server navigateTree.do Multiple Vulnerabilities

The version of IBM WebSphere Application installed on the remote host fails to sanitize input to the 'keyField', 'nameField', 'valueField', and 'frameReturn' parameters of the 'uddigui/navigateTree.do' script before using it to generate dynamic content. An unauthenticated remote attacker may be...

ManageEngine OpManager Login.do Multiple Parameter XSS

The remote host is running ManageEngine OpManager, a web-based network management application. The version of ManageEngine OpManager installed on the remote host fails to sanitize user input to the 'requestid' parameter of the 'jsp/Login.do' script before using it to generate dynamic content. An...

Weblord.it MS-TopSites - Unauthorized Access / HTML Injection

source: https://www.securityfocus.com/bid/26358/info MS-TopSites is prone to an unauthorized-access vulnerability and an HTML-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to gain elevated privileges on the...

SiteBar: Multiple issues

Background SiteBar is a PHP application that allows users to store their bookmarks on a web server. Description Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the "dir" parameter CVE-2007-5491, CVE-2007-5694; the translation module also...

Weblord.it MS-TopSites - Unauthorized Access HTML Injection

Weblord.it MS-TopSites - Unauthorized Access HTML Injection source: https://www.securityfocus.com/bid/26358/info MS-TopSites is prone to an unauthorized-access vulnerability and an HTML-injection vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker...

Galmeta Post 0.2 - Upload_Config.php Remote File Inclusion

Galmeta Post 0.2 - UploadConfig.php Remote File Inclusion source: https://www.securityfocus.com/bid/26329/info Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

i-Gallery 3.4 - 'igallery.asp' Remote Information Disclosure

source: https://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view arbitrary local files in the context of the...

Galmeta Post 0.2 - 'Upload_Config.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/26329/info Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are al...

easyGB 2.1.1 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26335/info easyGB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. easyGB 2.1.1 is vulnerable to this...

Omnistar Live - KB.php Cross-Site Scripting

Omnistar Live - KB.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26234/info Omnistar Live is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...