CVE-2011-4237

CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter, aka Bug ID CSCtu186...

PT-2012-1824

Name of the Vulnerable Software and Affected Versions CiscoWorks Common Services version 4.0 Description A CRLF injection issue in autologin.jsp allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter. Recommendations For CiscoWor...

Open redirect

Open redirect vulnerability in index.php aka the Login Page in ownCloud before 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirecturl parameter...

CVE-2012-1787

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...

PT-2012-3538

Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component. Recommendations For Webglimpse versions 2.20.0 a...

CVE-2012-1787: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...

Remote file inclusion

PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2012-0865

Multiple open redirect vulnerabilities in CubeCart 3.0.20 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 r parameter to switch.php or 2 goto parameter to admin/login.php...

CVE-2012-1070

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

Open redirect

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

PT-2012-1326

Name of the Vulnerable Software and Affected Versions PHP-Nuke version 8.0 Description A SQL injection issue exists in the Web Links module, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the url parameter in an Add action to modules.php...

PT-2012-3058

Name of the Vulnerable Software and Affected Versions TYPO3 Modern FAQ irfaq extension versions 1.1.2 through 1.1.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the return url...

CVE-2010-5083: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...

CVE-2011-5079: Improper Input Validation

Open redirect vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL, probably in the "return url parameter."...

CVE-2012-1070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Modern FAQ irfaq extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the "return url parameter."...

Open redirect

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

CVE-2012-0899

Cross-site scripting XSS vulnerability in referencement/sitesinscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter...

CVE-2012-0899

Cross-site scripting XSS vulnerability in referencement/sitesinscription.php in Annuaire PHP allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the nom parameter...

PT-2012-2933

Name of the Vulnerable Software and Affected Versions Annuaire PHP affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the url parameter and possibly the...