GLSA-200801-10 : TikiWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-10 TikiWiki: Multiple vulnerabilities Jesus Olmos Gonzalez from isecauditors reported insufficient sanitization of the 'movies' parameter in file tiki-listmovies.php CVE-2007-6528. Mesut Timur from H-Labs discovered that th...

F5 BIG-IP Application Security Manager 9.4.3 - report_type Cross-Site Scripting

F5 BIG-IP Application Security Manager 9.4.3 - reporttype Cross-Site Scripting source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied...

F5 BIG-IP Application Security Manager 9.4.3 - 'report_type' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27462/info F5 BIG-IP Application Security Manager is prone to a cross-site scripting vulnerability because the web management interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Fonality trixbox 2.4.2 - Cross-Site Scripting (2)

Fonality trixbox 2.4.2 - Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Fonality trixbox 2.4.2 - Cross-Site Scripting (2)

source: https://www.securityfocus.com/bid/27460/info The 'trixbox' product is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Novemberborn sIFR 2.0.23 - txt Cross-Site Scripting

Novemberborn sIFR 2.0.23 - txt Cross-Site Scripting source: https://www.securityfocus.com/bid/27394/info Novemberborn sIFR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

DeluxeBB 1.1 - attachments_header.php Cross-Site Scripting

DeluxeBB 1.1 - attachmentsheader.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27401/info DeluxeBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

DeluxeBB 1.1 - 'attachments_header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27401/info DeluxeBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Novemberborn sIFR 2.0.2/3 - 'txt' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27394/info Novemberborn sIFR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Nucleus CMS 3.22 - action.php Cross-Site Scripting

Nucleus CMS 3.22 - action.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27492/info Nucleus CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Nucleus CMS 3.22 - 'action.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27492/info Nucleus CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Debian Security Advisory DSA 1298-1 (otrs2)

The remote host is missing an update to otrs2 announced via advisory DSA 1298-1. OpenVAS Vulnerability Test $Id: deb12981.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1298-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 914-1 (horde2)

The remote host is missing an update to horde2 announced via advisory DSA 914-1. A vulnerability has been discovered in horde2, a web application suite, that allows attackers to insert arbitrary script code into the error web page. The old stable distribution woody does not contain horde2 package...

Debian: Security Advisory (DSA-1094-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1034-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1298-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1098-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Running Management 1.0.2 - index.php Cross-Site Scripting

PHP Running Management 1.0.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27268/info PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

PHP Running Management 1.0.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27268/info PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Moodle 1.8.3 - install.php Cross-Site Scripting

Moodle 1.8.3 - install.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27259/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...