OneFileCMS 1.1.1 - 'onefilecms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49257/info OneFileCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

phpWebSite - 'page_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49176/info phpWebSite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

CVE-2011-2694

Cross-site scripting XSS vulnerability in the chgpasswd function in web/swat.c in the Samba Web Administration Tool SWAT in Samba 3.x before 3.5.10 allows remote authenticated administrators to inject arbitrary web script or HTML via the username parameter to the passwd program aka the user field...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4666)

This update of flash player fixes a cross-site scripting vulnerability CVE-2011-2107. For further details please refer to http://www.adobe.com/support/security/bulletins/apsb11-13.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

CVE-2011-1157

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

Unfixed XSS vulnerability at dutyfreehosting.com

Security researcher db, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting dutyfreehosting.com, which at the time of submission ranked 911435 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Bacula-Web 1.3.x Cross Site Scripting / SQL Injection

GotGeek Labs http://www.gotgeek.com.br/ Bacula-web 1.3.x - 5.0.3 Multiple Remote Vulnerabilities + Description Bacula-Web is a web based tool that provide you a summarized view of your bacula director. It obtain his information from your bacula catalog's database. It provide some usefull...

phpWebSite <= 1.7.1 XSS Vulnerability - Active Check

phpWebSite is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Ports: phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. VID 753f8185-5ba9-42a4-be02-3f55ee580093 OpenVAS Vulnerability Test $ Description: Auto generated from VID 753f8185-5ba9-42a4-be02-3f55ee580093 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Unfixed XSS vulnerability at trapster.com

Security researcher Sony, has submitted on 21/01/2011 a cross-site-scripting XSS vulnerability affecting trapster.com, which at the time of submission ranked 200564 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently...

Unfixed XSS vulnerability at www.bna.com.tn

Security researcher Electr0n Libre, has submitted on 28/12/2010 a cross-site-scripting XSS vulnerability affecting www.bna.com.tn, which at the time of submission ranked 1439724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Mandriva Update for git MDVSA-2010:256 (git)

Check for the Version of git OpenVAS Vulnerability Test Mandriva Update for git MDVSA-2010:256 git Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Unfixed XSS vulnerability at www.pixel.com.au

Security researcher db, has submitted on 19/12/2010 a cross-site-scripting XSS vulnerability affecting www.pixel.com.au, which at the time of submission ranked 1203873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

CVE-2010-4396

Cross-zone scripting vulnerability in the HandleAction method in a certain ActiveX control in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 allows remote attackers to inject arbitrary web script or HTML in the Local Zone by specifying ...

Unfixed XSS vulnerability at www.foroswebgratis.com

Security researcher Deuvede, has submitted on 12/01/2010 a cross-site-scripting XSS vulnerability affecting www.foroswebgratis.com, which at the time of submission ranked 19616 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

Unfixed XSS vulnerability at www.ilirija.si

Security researcher RoAdKiLlEr, has submitted on 21/09/2010 a cross-site-scripting XSS vulnerability affecting www.ilirija.si, which at the time of submission ranked 5627740 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...

Oracle BPM Process Administrator tips.jsp context Parameter XSS

The Oracle Business Process Manager BPM Suite's Process Administrator running on the remote host contains a JSP script - 'webconsole/faces/faces/faces/jsf/tips.jsp' - that fails to sanitize user input to the 'context' parameter before using it to generate dynamic HTML output. An attacker may be...

Mantis 1.2.x < 1.2.2 Cross-Site Scripting Vulnerability

Binary data 5619.prm...

Unfixed XSS vulnerability at smansapati.com

Security researcher robusta, has submitted on 07/07/2010 a cross-site-scripting XSS vulnerability affecting smansapati.com, which at the time of submission ranked 4912129 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is current...

ManageEngine ADAudit Plus 'reportList' Parameter XSS

The version of ADAudit Plus installed on the remote web server has a cross-site scripting vulnerability. Input passed to the 'reportList' parameter of 'jsp/audit/reports/ExportReport.jsp' is not properly sanitized before it is used to generate dynamic HTML content. An unauthenticated, remote...