S9Y Serendipity 1.5.5 - 'serendipity[filter][bp.ALT]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50502/info Serendipity is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

phpLDAPadmin '_debug' XSS Vulnerability - Active Check

phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBSng 'str' Parameter Cross Site Scripting Vulnerability

IBSng is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal...

IBSng XSS Vulnerability (Nov 2011) - Active Check

IBSng is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Domain Shop - index.php Cross-Site Scripting

Domain Shop - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50454/info Domain Shop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...

vBulletin 4.1.7 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50455/info vBulletin is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary scri...

Domain Shop - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50454/info Domain Shop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

Plici Search 2.0.0.Stable.r.1878 - 'p48-search.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context ...

XAMPP < 1.7.7 Multiple XSS Vulnerabilities - Active Check

XAMPP is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

vTiger CRM 5.2.1 - &#039;index.php&#039; Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/50364/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XAMPP 1.7.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50381/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50344/info InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these...

Splunk 4.1.6 - segment Cross-Site Scripting

Splunk 4.1.6 - segment Cross-Site Scripting source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in a...

MODx < 2.0.3-pl modahsh Parameter XSS

The version of MODx hosted on the remote web server fails to sanitize the 'modahsh' parameter of the 'manager/index.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML an...

Innovate Portal 2.0 - &#039;cat&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/50295/info Innovate Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in th...

Splunk 4.1.6 - &#039;segment&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context...

Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50307/info Tine is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the...