C2 WebResource - File Cross-Site Scripting

C2 WebResource - File Cross-Site Scripting source: https://www.securityfocus.com/bid/58838/info C2 WebResource is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

C2 WebResource - 'File' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58838/info C2 WebResource is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

e107 - 'content_preset.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58841/info e107 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

WordPress Plugin Feedweb - 'wp_post_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58771/info Feedweb plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

WordPress Plugin Feedweb - wp_post_id Cross-Site Scripting

WordPress Plugin Feedweb - wppostid Cross-Site Scripting source: https://www.securityfocus.com/bid/58771/info Feedweb plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...

jPlayer - Jplayer.swf Script Cross-Site Scripting

jPlayer - Jplayer.swf Script Cross-Site Scripting source: https://www.securityfocus.com/bid/59030/info jPlayer is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Paypal Bug Bounty #48 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 48 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=830 PayPal Security UID: dyf1f8cejz Release Date: ============= 2013-03-28 Vulnerability Laboratory ID VL-ID:...

CKEditor sample_posteddata.php XSS

The version of the CKEditor installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'sampleposteddata.php' script. An unauthenticated, remote attacker may be able to leverage this to inject arbitrary HTML an...

Multiple Vulnerabilities in KrisonAV CMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in KrisonAV CMS, which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-Site Scripting XSS vulnerability in KrisonAV CMS: CVE-2013-2712 The vulnerability exists due to...

OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities

OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58720/info OrionDB Web Directory is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to...

Atmail WebMail - searchResultsTab5?filter Reflected Cross-Site Scripting

Atmail WebMail - searchResultsTab5?filter Reflected Cross-Site Scripting source: https://www.securityfocus.com/bid/65408/info Atmail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

WordPress Plugin Banners Lite - wpbanners_show.php HTML Injection

WordPress Plugin Banners Lite - wpbannersshow.php HTML Injection source: https://www.securityfocus.com/bid/58671/info The Banners Lite plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow...

WordPress Plugin Banners Lite - 'wpbanners_show.php' HTML Injection

source: https://www.securityfocus.com/bid/58671/info The Banners Lite plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

Apache HTTPD mod_proxy_balancer Cross Site Scripting (CVE-2012-4558)

A cross site scripting vulnerability exists in Apache HTTP web server modproxybalancer. The vulnerability is due to a lack of input validation in the URI of the modproxybalancer manager interface. A remote attacker can exploit these vulnerabilities by enticing a user to follow a specially crafted...

Jaow CMS - 'add_ons' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58658/info Jaow CMS is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

Jaow CMS - add_ons Cross-Site Scripting

Jaow CMS - addons Cross-Site Scripting source: https://www.securityfocus.com/bid/58658/info Jaow CMS is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

Debian DSA-2651-1 : smokeping - XSS vulnerability

A cross-site scripting vulnerability was discovered in smokeping, a latency logging and graphing system. Input passed to the 'displaymode'parameter was not properly sanitized. An attacker could use this flaw to execute arbitrary HTML and script code in a user's browser session in the context of a...

Debian Security Advisory DSA 2651-1 (smokeping - cross-site scripting vulnerability)

A cross-site scripting vulnerability was discovered in smokeping, a latency logging and graphing system. Input passed to the displaymode parameter was not properly sanitized. An attacker could use this flaw to execute arbitrary HTML and script code in a user's browser session in the context of an...

PHP-Fusion forum/viewthread.php highlight Parameter XSS

The version of PHP-Fusion installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'highlight' parameter of the 'forum/viewthread.php' script. An unauthenticated, remote attacker may be able to leverage this to inject...

Petite Annonce - Cross-Site Scripting

Petite Annonce - Cross-Site Scripting source: https://www.securityfocus.com/bid/58508/info Petite Annonce is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...