CVE-2006-0783

Cross-site scripting XSS vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the commenttext parameter to the user comment page /edit/Comment...

[SA18892] Siteframe Page Comment Script Insertion Vulnerability

TITLE: Siteframe Page Comment Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18892 VERIFY ADVISORY: http://secunia.com/advisories/18892/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Siteframe 5.x http://secunia.com/product/8006/ DESCRIPTION: Kiki...

Siteframe Beaumont 5.0.1/5.0.2 - 'page.php' HTML Injection

source: https://www.securityfocus.com/bid/16695/info Siteframe Beaumont is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the...

Siteframe Beaumont 5.0.15.0.2 - page.php HTML Injection

Siteframe Beaumont 5.0.15.0.2 - page.php HTML Injection source: https://www.securityfocus.com/bid/16695/info Siteframe Beaumont is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content...

Siteframe Beaumont 5.0.1a <== Cross-Site Scripting Vulnerability

Hi, I'm Kiki and I would signal you a XSS in the CMS Siteframe Beaumont 5.0.1a I enclose the advisory and the origina is here: http://kiki91.altervista.org/exploit/siteframe5.0.1axss.txt Bye bye Kiki p.s: sorry for my bad English but I'm Italian ; Advisory: Siteframe Beaumont 5.0.1a == Cross-Site...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2006-0675

Cross-site scripting XSS vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2006-0675

This CVE describes a Cross-site Scripting (XSS) vulnerability in Siteframe 5.0.1, exposed via the q parameter in search.php. The root cause is improper handling of user-supplied input leading to script or HTML injection, enabling remote attackers to execute script in a victim’s browser. The NVD n...

CVE-2006-0675

Cross-site scripting XSS vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

[SA18804] Siteframe "q" Cross-Site Scripting Vulnerability

TITLE: Siteframe "q" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18804 VERIFY ADVISORY: http://secunia.com/advisories/18804/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Siteframe 5.x http://secunia.com/product/8006/ DESCRIPTION: Kiki has reporte...

Siteframe Beaumont 5.0.1 - search.php?Q Cross-Site Scripting

Siteframe Beaumont 5.0.1 - search.php?Q Cross-Site Scripting source: https://www.securityfocus.com/bid/16596/info Siteframe Beaumont is prone to a cross-site scripting vulnerability. This issue affects the 'search.php' script. Siteframe Beaumont 5.0.1 and prior versions are reportedly vulnerable...

Siteframe Beaumont 5.0.1 - 'search.php?Q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16596/info Siteframe Beaumont is prone to a cross-site scripting vulnerability. This issue affects the 'search.php' script. Siteframe Beaumont 5.0.1 and prior versions are reportedly vulnerable. http://www.example.com/search.php?q=XSS...

Siteframe Cross Site Scripting Bugs

Siteframe 2.2.4 has a cross site scripting bug. An attacker may use it to perform a cross site scripting attack on this host. In addition to this, another flaw in this package may allow an attacker to obtain the physical path to the remote web root. SPDX-FileCopyrightText: 2003 k-otik.com Some te...

CVE-2005-1965

PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCALPATH parameter...

[SA15657] Siteframe "LOCAL_PATH" File Inclusion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Siteframe siteframe.php LOCAL_PATH Parameter Remote File Inclusion

The remote host is running Siteframe, an open source content management system using PHP and MySQL. The installed version of Siteframe does not properly sanitize the 'LOCALPATH' parameter of the 'siteframe.php' script before using it to include files. By leveraging this flaw, an attacker is able ...

Siteframe search.php searchfor Parameter XSS

Siteframe 2.2.4 has a cross-site scripting bug. An attacker may use it to perform a cross-site scripting attack on this host. In addition to this, another flaw in this package may allow an attacker to obtain the physical path to the remote web root. %NASLMINLEVEL 70300 written by K-Otik.com...

Siteframe 2.2.4 - search.php Cross-Site Scripting Vulnerability

Siteframe 2.2.4 search.php Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/7140/info It has been reported that Siteframe does not sufficiently filter user supplied URI parameters on Siteframe pages. As a result of this deficiency, it i...

Siteframe CMS 2.2.4 - download.php Information Disclosure

Siteframe CMS 2.2.4 - download.php Information Disclosure source: https://www.securityfocus.com/bid/7143/info Siteframe has been reported vulnerable to an information disclosure vulnerability. When handling certain download requests Siteframe may be lead into an error condition. When these errors...

Siteframe CMS 2.2.4 - 'download.php' Information Disclosure

source: https://www.securityfocus.com/bid/7143/info Siteframe has been reported vulnerable to an information disclosure vulnerability. When handling certain download requests Siteframe may be lead into an error condition. When these errors occur, the script will output some path information...