WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities

WorkBoard 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12009/info It is reported that WorkBoard is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI...

UBBCentral UBB.Threads 6.2.36.5 - online.php?Cat Cross-Site Scripting

UBBCentral UBB.Threads 6.2.36.5 - online.php?Cat Cross-Site Scripting source: https://www.securityfocus.com/bid/11900/info It is reported that UBB.threads is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize...

Mark Zuckerberg Thefacebook - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11676/info It is reported that Thefacebook is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to creat...

Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities

TITLE : Internet Explorer HTML Help Control ActiveX Cross Domain/Zone Scripting Vulnerabilities Criticality : Less Critical : WHERE : From remote Requires user interaction IMPACT : Security Bypass System Access Exposure of Sensitive Information SOFTWARE : Microsoft Internet Explorer 6 Tested on :...

[SA12729] My Blog Unspecified Cross-Site Scripting Vulnerabilities

TITLE: My Blog Unspecified Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA12729 VERIFY ADVISORY: http://secunia.com/advisories/12729/ CRITICAL: Less critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: My Blog 1.x http://secunia.com/product/4001/ DESCRIPTION:...

mozilla -- scripting vulnerabilities

Several scripting vulnerabilities were discovered and corrected in Mozilla: CVE-2004-0905 javascript; links dragged onto another frame or page allows an attacker to steal or modify sensitive information from other sites. The user could be convinced to drag obscurred links in the context of a game...

PHP Code Snippet Library 0.8 - Multiple Cross-Site Scripting Vulnerabilities

PHP Code Snippet Library 0.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11038/info PHP Code Snippet Library is reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize...

PhotoPost PHP Pro 3.x/4.x - 'showgallery.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/9994/info Multiple SQL injection, cross-site scripting and HTML injection vulnerabilities have been identified in the application, which may allow an attacker to execute arbitrary HTML or script code in a user's browser and/or influence SQL query logic to...

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9947/info It has been reported that MS-Analysis is prone to a multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

PHP-Nuke MS-Analysis Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9947/info It has been reported that MS-Analysis is prone to a multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI parameters. These issues could permit a remote attacke...

Expinion.net Member Management System 2.1 - 'error.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

Expinion.net Member Management System 2.1 - 'register.asp?err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...

CVE-2004-1829

Multiple cross-site scripting XSS vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 pagetitle or 2 error parameters, or 3 certain parameters in the error log...

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9873/info It has been reported that YaBB and YaBB SE are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly validate URI...

Emumail EMU Webmail 5.2.7 - 'emumail.fcgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9861/info Multiple vulnerabilities have been identified in the application that may allow an attacker to carry out cross-site scripting attacks and disclose the path to the victim's home directory. The issues are reported to exist in the login script,...

Invision Power Board (IP.Board) 1.3 - Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 1.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9768/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to insufficient sanitization of input supplied via the 'c', 'f...

Novell Netware Enterprise Web Server 5.16.0 - Multiple Cross-Site Scripting Vulnerabilities

Novell Netware Enterprise Web Server 5.16.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attack...

Psychoblogger PB-beta1 - desc Cross-Site Scripting

Psychoblogger PB-beta1 - desc Cross-Site Scripting source: https://www.securityfocus.com/bid/9293/info It has been reported that Psychoblogger may be prone to multiple cross-site scripting vulnerabilities that may allow a remote attacker to execute HTML or script code in a user's browser. The...

CVE-2003-0602

Multiple cross-site scripting vulnerabilities XSS in Bugzilla 2.16.x before 2.16.3 and 2.17.x before 2.17.4 allow remote attackers to insert arbitrary HTML or web script via 1 multiple default German and Russian HTML templates or 2 ALT and NAME attributes in AREA tags as used by the GraphViz grap...

Vignette 45 - Cross-Site Scripting

Vignette 45 - Cross-Site Scripting source: https://www.securityfocus.com/bid/7687/info Vignette software has been reported prone to multiple cross-site scripting vulnerabilities. Reportedly the issue presents itself, because the Vignette software does not sufficiently sanitize HTML characters fro...