15462 matches found
netjukebox 'skin' Parameter Cross Site Scripting Vulnerability
netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
Ripe Website Manager 1.1 - Cross-Site Scripting Multiple SQL Injections
Ripe Website Manager 1.1 - Cross-Site Scripting Multiple SQL Injections source: https://www.securityfocus.com/bid/47017/info Ripe Website Manager is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied dat...
MC Content Manager 10.1.1 - Multiple Cross-Site Scripting Vulnerabilities
MC Content Manager 10.1.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47014/info MC Content Manager is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...
AIX 6.1 TL 3 : bos.net.tcp.client (U839021)
The remote host is missing AIX PTF U839021, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U839021. The text itself is copyright C...
AIX 610003 : U839083
The remote host is missing AIX PTF U839083 which is related to the security of the package bos.altdiskinstall.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 610003 : U840504
The remote host is missing AIX PTF U840504 which is related to the security of the package devices.vdevice.IBM.l-lan.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 610003 : U839022
The remote host is missing AIX PTF U839022 which is related to the security of the package bos.rte.libc You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 610005 : U841351
The remote host is missing AIX PTF U841351 which is related to the security of the package devices.pci.14106e01.X11.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
Ripe Website Manager 1.1 - Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/47017/info Ripe Website Manager is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary...
netjukebox 4.01B/5.25 - 'skin' Cross-Site Scripting
source: https://www.securityfocus.com/bid/47027/info netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...
netjukebox 4.01B5.25 - skin Cross-Site Scripting
netjukebox 4.01B5.25 - skin Cross-Site Scripting source: https://www.securityfocus.com/bid/47027/info netjukebox is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage th...
AIX 610003 : U841137
The remote host is missing AIX PTF U841137 which is related to the security of the package bos.rte.console You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 610003 : U841129
The remote host is missing AIX PTF U841129 which is related to the security of the package bos.rte.lvm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
HP NNM CGI webappmon.exe execvp Buffer Overflow
Exploit for windows platform in category remote exploits $Id: hpnnmwebappmonexecvp.rb 12086 2011-03-23 03:38:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...
GrapeCity Data Dynamics Reports 1.6.2084.14 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47015/info GrapeCity Data Dynamics Reports is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
MC Content Manager 10.1.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47014/info MC Content Manager is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
SA-CONTRIB-2011-014 - Webform Block - Cross Site Scripting
The Webform Block module enables users to make a webform available as a block. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full administrative access. The...
Newsportal 0.37 - post.php Cross-Site Scripting
Newsportal 0.37 - post.php Cross-Site Scripting source: https://www.securityfocus.com/bid/46961/info NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage thi...
PluggedOut Blog 1.9.9 - 'year' Cross-Site Scripting
source: https://www.securityfocus.com/bid/46962/info PluggedOut Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in...
Online store PHP script - Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/46960/info Online store php script is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authenticati...