Papaya CMS 4.0.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/16005/info papaya CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

Commercial Interactive Media SCOOP! 2.3 - 'category.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrar...

LiveJournal - Cleanhtml.pl HTML Injection

source: https://www.securityfocus.com/bid/15990/info LiveJournal is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would b...

LiveJournal - Cleanhtml.pl HTML Injection

LiveJournal - Cleanhtml.pl HTML Injection source: https://www.securityfocus.com/bid/15990/info LiveJournal is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15931/info PHP-Fusion is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

PlaySms 0.8 - index.php Cross-Site Scripting

PlaySms 0.8 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15928/info PlaySmS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Magnolia Search Module 2.1 - Cross-Site Scripting

Magnolia Search Module 2.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

Marwel 2.7 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

ContentServ 3.03.14.0 - index.php SQL Injection

ContentServ 3.03.14.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15956/info ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PlaySms 0.8 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15928/info PlaySmS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15939/info Caravel CMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Miraserver 1.0 RC4 - index.php?page SQL Injection

Miraserver 1.0 RC4 - index.php?page SQL Injection source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

FLIP 0.9.0.1029 - text.php?name Cross-Site Scripting

FLIP 0.9.0.1029 - text.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

WebCal 3.0 4 - webcal.cgi Multiple Cross-Site Scripting Vulnerabilities

WebCal 3.0 4 - webcal.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15917/info WebCal is prone to multiple HTML injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15913/info binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities

AltantForum 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15887/info AtlantForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...