Domain Shop - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50454/info Domain Shop is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

vBulletin 4.1.7 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50455/info vBulletin is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary scri...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Prosieben Community 2011 - Persistent Web Vulnerability

Document Title: =============== Prosieben Community 2011 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=306 Release Date: ============= 2011-10-30 Vulnerability Laboratory ID VL-ID: ==================================== 306...

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

XAMPP < 1.7.7 Multiple XSS Vulnerabilities - Active Check

XAMPP is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Plici Search 2.0.0.Stable.r.1878 - 'p48-search.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context ...

vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/50364/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XAMPP 1.7.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50381/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50344/info InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these...

Splunk 4.1.6 - segment Cross-Site Scripting

Splunk 4.1.6 - segment Cross-Site Scripting source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in a...

MODx < 2.0.3-pl modahsh Parameter XSS

The version of MODx hosted on the remote web server fails to sanitize the 'modahsh' parameter of the 'manager/index.php' script before using it to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject arbitrary HTML an...

Innovate Portal 2.0 - 'cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50295/info Innovate Portal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in th...

Splunk 4.1.6 - 'segment' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context...

Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50307/info Tine is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the...

asgbookPHP 1.9 - index.php Cross-Site Scripting

asgbookPHP 1.9 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50167/info asgbookphp is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script...

Mozilla Products Same Origin Policy Bypass Vulnerability (MAC OS X)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to same origin policy bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtssecbypassvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Same Origin Policy Bypass Vulnerability MAC OS X...

Mozilla Products Same Origin Policy Bypass Vulnerability - Mac OS X

Mozilla Firefox/Thunderbird/Seamonkey is prone to same origin policy bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

POSH Local File Include and Cross Site Scripting Vulnerabilities

POSH is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the contex...

WordPress Plugin Pretty Link 1.4.56 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50096/info The Pretty Link plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...