WordPress Plugin custom tables - 'key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54326/info WordPress custom tables plugin is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SWFupload - 'movieName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54245/info SWFUpload is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

SWFupload - movieName Cross-Site Scripting

SWFupload - movieName Cross-Site Scripting source: https://www.securityfocus.com/bid/54245/info SWFUpload is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54235/info TEMENOS T24 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities

TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/54235/info TEMENOS T24 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

Opera Web Browser 11.65之前版本多个漏洞

BUGTRAQ ID: 54011 Opera为来自挪威的一个浏览器。 Opera Web Browser 11.65之前版本在实现上存在多个漏洞，攻击者可利用这些漏洞执行任意脚本代码，泄露敏感信息或欺骗可信站点的原始URL，进行网络钓鱼攻击。 0 Opera Software Opera Web Browser 9.x Opera Software Opera Web Browser 11.x Opera Software Opera Web Browser 10.x 厂商补丁： Opera Software --------------...

Oracle iPlanet Web Server 7.0.x < 7.0.15 Multiple Vulnerabilities

According to its self-reported version, the Oracle iPlanet Web Server formerly Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to parameter...

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

Elgg index.php view Parameter XSS

The version of the Elgg installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'view' parameter of the 'index.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script code into a...

MS12-040: Vulnerability in Microsoft Dynamics AX Enterprise Portal Could Allow Elevation of Privilege (MSSQL check)

Binary data ms12-040mssql.nbin...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Commentics - index.php Cross-Site Scripting

Commentics - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54111/info Commentics is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

AdaptCMS 2.0.2 - 'index.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info AdaptCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

AdaptCMS 2.0.2 - index.php Script Cross-Site Scripting

AdaptCMS 2.0.2 - index.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/54097/info AdaptCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Boonex Dolphin v7.0.9 CMS &amp; Mobile App - Multiple Web Vulnerabilities

Title: ====== Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=565 http://www.vulnerability-lab.com/getcontent.php?id=566 ID: Changeset 16256 VL-ID: ===== 565 Common Vulnerability Scoring...

Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities

Title: ====== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=592 VL-ID: ===== 592 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...

MediaWiki 1.x - uselang Cross-Site Scripting

MediaWiki 1.x - uselang Cross-Site Scripting source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

MediaWiki 1.x - 'uselang' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...