Oliver - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24754/info Oliver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Plume CMS 1.0.4 - index.php?_PX_config[manager_path] Remote File Inclusion

Plume CMS 1.0.4 - index.php?PXconfigmanagerpath Remote File Inclusion source: https://www.securityfocus.com/bid/18780/info Plume CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows the...

Moodle 1.7.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24748/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context ...

Claroline 1.8.3 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Claroline 1.8.3 - $_SERVER[PHP_SELF] Multiple Cross-Site Scripting Vulnerabilities

Claroline 1.8.3 - $SERVERPHPSELF Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

Yoggie Pico and Pico Pro Backticks - Remote Code Execution

Yoggie Pico and Pico Pro Backticks - Remote Code Execution source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to...

ETicket 1.5.5 - 'Open.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary...

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - 'setup.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI...

Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities

Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24626/info Calendrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Key Focus Web Server 3.1 - Index.WKF Cross-Site Scripting

source: https://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Joomla! Mambo Component Mod_Forum - PHPBB_Root.php Remote File Inclusion

Joomla! Mambo Component ModForum - PHPBBRoot.php Remote File Inclusion source: https://www.securityfocus.com/bid/24591/info The 'modforum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An...

Joomla! / Mambo Component Mod_Forum - 'PHPBB_Root.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/24591/info The 'modforum' component for Joomla and Mambo is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containin...

Wrapper.php for osCommerce - Local File Inclusion

Wrapper.php for osCommerce - Local File Inclusion source: https://www.securityfocus.com/bid/24565/info Wrapper.php for OsCommerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view...

FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVAR_SCRIPTRUN Cross-Site Scripting

FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVARSCRIPTRUN Cross-Site Scripting source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

TDizin - Arama.asp Cross-Site Scripting

TDizin - Arama.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/24515/info TDizin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attac...

Fuzzylime 1.0 - 'Low.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24522/info Fuzzylime is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the conte...

Apache Tomcat snoop.jsp URI XSS

The remote Apache Tomcat web server includes an example JSP application, 'snoop.jsp', that fails to sanitize user-supplied input before using it to generate dynamic content. An unauthenticated, remote attacker can exploit this issue to inject arbitrary HTML or script code into a user's browser to...

Apache MyFaces Tomahawk JSF Framework 1.1.5 - 'Autoscroll' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24480/info Apache Tomahawk MyFaces JSF Framework is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to launch cross-site scripting attacks on...

Joomla! Component Letterman Subscriber Module 1.2.4 - 'Mod_Lettermansubscribe.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24479/info The Joomla! Letterman Subscriber module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...