Sun Java System Delegated Administrator 6.x - HTTP Response Splitting

source: https://www.securityfocus.com/bid/34643/info Sun Java System Delegated Administrator is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served,...

Banner Student System Cross Site Scripting

| | ||| ||| | | | | | || || By: gamr | | | | | | ||| ||| Header Product - Banner Student System by SunGard Specific Page - http://www.EXAMPLE.com/PATH/twbkwbis.PSecurityQuestion Change Security Question Version - 7.4 / earlier versions could be effected also Product URL -...

RedHat Stronghold Web Server 2.3 - Cross-Site Scripting

RedHat Stronghold Web Server 2.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/34606/info Red Hat Stronghold Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WebGlimpse 2.18.7 - 'DOC' Directory Traversal

source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in th...

Malleo 1.2.3 - admin.php Local File Inclusion

Malleo 1.2.3 - admin.php Local File Inclusion source: https://www.securityfocus.com/bid/34588/info Malleo is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files ...

Atmail WebMail Email Body HTML Injection Vulnerability

Atmail and Atmail WebMail are prone to an HTML-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Atlassian JIRA < 3.13.3 DWR 'c0-id' XSS

The Atlassian JIRA installation hosted on the remote web server is affected by a cross-site scripting XSS vulnerability due to a failure to sanitize input to the 'c0-id' parameter during a DWR call. A remote attacker, using a crafted URL, can exploit this to execute JavaScript in a user's browser...

Phorum 5.2 - adminusers.php Multiple Cross-Site Scripting Vulnerabilities

Phorum 5.2 - adminusers.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these...

Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...

Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...

Horde Multiple Vulnerabilities (Apr 2009)

Horde is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Horde Products Local File Include and Cross Site Scripting Vulnerabilities

Horde products are prone to a local file-include vulnerability and a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...

Arcadwy Arcade Script (username) Static XSS Vulnerability

No description provided by source. \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. \/ ! EXPLOIT...

Arcadwy Arcade Script (username) Static XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Arcadwy Arcade Script username Static XSS Vulnerability ========================================================= \ Information Script : Arcadwy Arcade Script CMS Buy/Download :...

Arcadwy Arcade Script - 'Username' Static Cross-Site Scripting

\ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. / ! EXPLOIT 1 Go to http://site.com/register.ph...

Arcadwy Arcade Script - Username Static Cross-Site Scripting

Arcadwy Arcade Script - Username Static Cross-Site Scripting \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s,...

Arcadwy Arcade Script Static XSS

\ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. / ! EXPLOIT 1 Go to http://site.com/register.ph...

Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check

Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

TangoCMS 'listeners.php' Cross Site Scripting Vulnerability

TangoCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...

RevSense SQL Injection and Cross Site Scripting Vulnerabilities

RevSense is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify...