Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities

Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55275/info Phorum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

WordPress Count per Day Plugin 'userperspan.php' Multiple XSS Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

DokuWiki 'target' Parameter Cross Site Scripting Vulnerability

DokuWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dokuwiki:dokuwiki"...

WordPress Count per Day Plugin 3.2.3 - XSS Vulnerability

WordPress Count per Day plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

IBM Rational ClearQuest 8.0 - Multiple Vulnerabilities

IBM Rational ClearQuest 8.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/55125/info IBM Rational ClearQuest is prone to the following security vulnerabilities: 1. An HTML-injection vulnerability. 2. Multiple information-disclosure vulnerabilities. 3. A security-bypass...

xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability

Exploit for php platform in category web applications xt:Commerce VEYTON 4.0.15 productsnamede Script Insertion Vulnerability form name="XSS" method="POST"...

LabWiki Multiple Cross Site Scripting (XSS) Vulnerabilities

LabWiki is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Rational ClearQuest 8.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/55125/info IBM Rational ClearQuest is prone to the following security vulnerabilities: 1. An HTML-injection vulnerability. 2. Multiple information-disclosure vulnerabilities. 3. A security-bypass vulnerability. Attackers may leverage these issues to obtai...

LibGuides - Multiple Cross-Site Scripting Vulnerabilities

LibGuides - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55222/info LibGuides is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Power-eCommerce - Multiple Cross-Site Scripting Vulnerabilities

Power-eCommerce - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55216/info Power-eCommerce is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

Mihalism Multi Host - users.php Cross-Site Scripting

Mihalism Multi Host - users.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55237/info Mihalism Multi Host is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities

Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55220/info Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

KindEditor - name Cross-Site Scripting

KindEditor - name Cross-Site Scripting source: https://www.securityfocus.com/bid/55172/info KindEditor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

SiNG cms - Password.php Cross-Site Scripting

SiNG cms - Password.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55168/info SiNG cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

Websense Content Gateway - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55194/info Websense Content Gateway is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Websense Content Gateway - Multiple Cross-Site Scripting Vulnerabilities

Websense Content Gateway - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55194/info Websense Content Gateway is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage thes...

SiNG cms 2.9.0 (email) Remote XSS POST Injection Vulnerability

Summary SiNG cms is a free modular Content Management System open source, based on a bunch of PHP / MySQL and intended use of the web server Apache. Description The application is prone to a reflected cross-site scripting vulnerability due to a failure to properly sanitize user-supplied input to...

SiNG cms - 'Password.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55168/info SiNG cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

LISTSERV 16 - 'SHOWTPL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55082/info LISTSERV is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Cross-Site Scripting (XSS) Vulnerabilities in Flogr

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Flogr, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS Vulnerabilities in Flogr: CVE-2012-4336 Input appended to the URL after /index.php is not properly sanitised before...