MediaWiki profileinfo.php 'filter' Parameter XSS

The version of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to the 'filter' parameter in the 'profileinfo.php' script. A remote attacker can exploit this, by tricking a user into requesting a maliciously...

SPIP 2.1 - 'var_login' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42060/info SPIP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Cross-site Scripting (XSS) Vulnerability in Edit-X CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Edit-X CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Edit-X CMS The vulnerability exists due to input sanitation error in the "searchtext" parameter in...

Cross-site Scripting (XSS) Vulnerability in Prado Portal

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Prado Portal which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Prado Portal: CVE-2010-4958 The vulnerability exists due to input sanitation error in the "page"...

YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion

source: https://www.securityfocus.com/bid/41773/info Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in th...

Mako 'cgi.escape()' Cross-Site Scripting Vulnerability

This host is installed with Mako and is prone to cross-site scripting vulnerability. Openvas Vulnerability Test $id: gbmakoxssvuln.nasl 10044 2010-07-12 13:10:35z jul $ Description: Mako 'cgi.escape' Cross-Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright C 2010 Greenbone...

Mako 'cgi.escape()' Cross-Site Scripting Vulnerability

Mako is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FestOS 2.3 - contents Cross-Site Scripting

FestOS 2.3 - contents Cross-Site Scripting source: https://www.securityfocus.com/bid/41725/info FestOS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

Sourcefabric Campsite Articles - HTML Injection

Sourcefabric Campsite Articles - HTML Injection source: https://www.securityfocus.com/bid/41780/info Sourcefabric Campsite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits wi...

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

DSite CMS 4.81 - 'modmenu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41724/info DSite CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHPWCMS 1.4.5 - 'PHPwcms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Spitfire 1.0.381 - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41701/info Spitfire is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker may exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Gekko Web Builder 9.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41726/info Gekko Web Builder is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Oracle Business Process Management 10.3.2 - Cross-Site Scripting

Oracle Business Process Management 10.3.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/41617/info Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

FireStats Multiple Cross Site Scripting Vulnerabilities

FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Oracle Business Process Management 10.3.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/41617/info Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...

Diem 5.1.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41587/info Diem is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities

This host is running Moodle and is prone to Cross-Site Scripting and Cross Site Request Forgery Vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlexssncsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Cross Site Scripting and Cross Site Request Forgery Vulnerabilities Authors: Madhuri...

dotDefender 4.02 - 'clave' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41541/info dotDefender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...