655 matches found
UMI 3D Tag Cloud [mod_umi3dtagcloud], 1.3.4 and below, XSS (Cross Site Scripting)
UMI 3D Tag Cloud modumi3dtagcloud, 1.3.4 and below, XSS Cross Site Scripting...
UMI CMS 2.7 'fields_filter' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34018/info UMI CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
UMI CMS Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26033/info UMI CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...
UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities
UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46280/info UMI CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/46280/info UMI CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
UMI CMS 2.7 - fields_filter Cross-Site Scripting
UMI CMS 2.7 - fieldsfilter Cross-Site Scripting source: https://www.securityfocus.com/bid/34018/info UMI CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
UMI CMS 2.7 - 'fields_filter' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34018/info UMI CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
CVE-2007-5428
Cross-site scripting XSS vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to the default URI in searchdo/...
Cross site scripting
Cross-site scripting XSS vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to the default URI in searchdo/...
CVE-2007-5428
Cross-site scripting XSS vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to the default URI in searchdo/...
CVE-2007-5428
CVE-2007-5428 is a cross-site scripting (XSS) vulnerability in UMI CMS. The flaw allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to the default URI in search_do/. The issue is documented with CVSS v2.0 base metrics: AV:N/AC:M/Au:N/C:N/I:P/A:N, base s...
UMI CMS - index.php Cross-Site Scripting
UMI CMS - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26033/info UMI CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...
russian-multi.txt
Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...
UMI CMS - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26033/info UMI CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
