Muraus Open Blog - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42255/info Tomaž Muraus Open Blog is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplie...

Joomla! Component com_jigsaw - Controller Directory Traversal

Joomla! Component comjigsaw - Controller Directory Traversal source: https://www.securityfocus.com/bid/42144/info The 'comjigsaw' component for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an...

MyIT CRM - Multiple Cross-Site Scripting Vulnerabilities

MyIT CRM - Multiple Cross-Site Scripting Vulnerabilities Advisory Name: Multiple Cross-Site Scripting XSS in MyIT CRM Internal Cybsec Advisory Id: 2010-0607-Multiple XSSs in MyIT CRM Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Jun 22, 2010 Affected Applications: MyIT...

MyIT CRM - Multiple Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Cross-Site Scripting XSS in MyIT CRM Internal Cybsec Advisory Id: 2010-0607-Multiple XSSs in MyIT CRM Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: Tue Jun 22, 2010 Affected Applications: MyIT CRM ver.0.2.8.1 Affected Platforms: Any running MyIT CRM...

nuBuilder <= 10.04.20 RFI Vulnerability

nuBuilder is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cybsec Advisory Multiple Cross-Site Scripting (XSS) in MyIT CRM

Exploit for php platform in category web applications =============================================================== Cybsec Advisory Multiple Cross-Site Scripting XSS in MyIT CRM =============================================================== Advisory Name: Multiple Cross-Site Scripting XSS in...

Sourcefabric Campsite - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42107/info Sourcefabric Campsite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Cetera eCommerce - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Cetera eCommerce - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42059/info Cetera eCommerce is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using...

Cetera eCommerce - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42059/info Cetera eCommerce is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code wou...

SPIP 2.1 - 'var_login' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42060/info SPIP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Social Media - index.php Local File Inclusion

Social Media - index.php Local File Inclusion source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

SAP NetWeaver 6.4/7.0 - 'wsnavigator' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41925/info SAP Netweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

iOffice 0.1 - 'parametre' Remote Command Execution

source: https://www.securityfocus.com/bid/41768/info iOffice is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and the underlying server. iOffice 0.1 is affected; othe...

YACS CMS 10.5.27 - context[path_to_root] Remote File Inclusion

YACS CMS 10.5.27 - contextpathtoroot Remote File Inclusion source: https://www.securityfocus.com/bid/41773/info Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

XSS vulnerability in CMSQLite

Vulnerability ID: HTB22464 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsqlite.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendo...

PHPWCMS 1.4.5 - 'PHPwcms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Pixie 1.0.4 - HTML Injection Cross-Site Scripting

Pixie 1.0.4 - HTML Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41727/info Pixie is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the issues to execu...

Sourcefabric Campsite Articles - HTML Injection

Sourcefabric Campsite Articles - HTML Injection source: https://www.securityfocus.com/bid/41780/info Sourcefabric Campsite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits wi...

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Pligg CMS 1.0.4 - search.php Cross-Site Scripting

Pligg CMS 1.0.4 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41729/info Pligg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...