VertrigoServ 2.25 - 'extensions.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51293/info VertrigoServ is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

SQLiteManager 1.2.4 - index.php Multiple Cross-Site Scripting Vulnerabilities

SQLiteManager 1.2.4 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51294/info SQLiteManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically...

SQLiteManager 1.2.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51294/info SQLiteManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary scrip...

SQLiteManager 1.2.4 - 'main.php?dbsel' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51294/info SQLiteManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary scrip...

UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting

UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Limny 3.0.1 - login.php Script Cross-Site Scripting

Limny 3.0.1 - login.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

GraphicsClone Script - term Cross-Site Scripting

GraphicsClone Script - term Cross-Site Scripting source: https://www.securityfocus.com/bid/51258/info GraphicsClone Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

UBBCentral UBB.Threads 7.5.6 - 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Orchard 1.3.9 - 'ReturnUrl' Open Redirection

source: https://www.securityfocus.com/bid/51260/info Orchard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Orchard 1.3.9 is vulnerable; other version...

TextPattern 4.4.1 - 'ddb' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51254/info TextPattern is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

WordPress Plugin WHOIS 1.4.2 3 - 'domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting

WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting source: https://www.securityfocus.com/bid/51241/info The Comment Rating plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could leverag...

WordPress Plugin Comment Rating 2.9.20 - 'path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51241/info The Comment Rating plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an...

Siena CMS 1.242 - err Cross-Site Scripting

Siena CMS 1.242 - err Cross-Site Scripting source: https://www.securityfocus.com/bid/51218/info Siena CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin WP Live.php 1.2.1 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Siena CMS 1.242 - 'err' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51218/info Siena CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting

WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51037/info The Welcomizer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may levera...