WordPress Rokbox Plugin Multiple Vulnerabilities

WordPress Rokbox Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress...

Multiple vulnerabilities in Achievo

High-Tech Bridge Security Research Lab discovered two vulnerabilities in Achievo, which can be exploited to perform SQL injection and cross-site scripting XSS attacks. 1 SQL Injection vulnerability in Achievo: CVE-2012-5865 The vulnerability was discovered in the "dispatch.php" script while...

Arbor Networks Peakflow SP 'index/' Cross Site Scripting Vulnerability

Arbor Networks Peakflow SP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Kajona 3.4.1 Cross Site Scripting

Exploit for php platform in category web applications Product: Kajona Vendor: www.kajona.de Vulnerable Versions: 3.4.1 and probably prior Tested Version: 3.4.1 Vendor Notification: 20 June 2012 Vendor Patch: 26 June 2012 Public Disclosure: 11 July 2012 Vulnerability Type: Cross-Site Scripting XSS...

Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

Oracle iPlanet Web Server 7.0.x < 7.0.15 Multiple Vulnerabilities

According to its self-reported version, the Oracle iPlanet Web Server formerly Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to parameter...

Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability

This host is running Support Incident Tracker and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsitidparamxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability Authors: Rachana Shetty Copyright: Copyright...

PHP Address Book Multiple Cross Site Scripting Vulnerabilities

This host is running PHP Address Book and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpaddressbookmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ PHP Address Book Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS Copyright:...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

phpList -- SQL injection and XSS vulnerability

Zero Science Lab reports: Input passed via the parameter 'sortby' is not properly sanitised before being returned to the user or used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. The param 'num' is vulnerable to a XSS issue where the attacker ca...

Brainkeeper Enterprise Wiki 'search.php' XSS Vulnerability

Brainkeeper Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability

This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadminbaseparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012...

IBM Web Experience Factory Multiple Cross Site Scripting Vulnerabilities

This host is installed with IBM Web Experience Factory and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmwebexperiencefactoryxssvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IBM Web Experience Factory Multiple Cross Site Scripting Vulnerabilities...

SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities

The host is running SQLiteManager and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbsqlitemanagermultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ SQLiteManager 'dbsel' And 'nsextt' Parameters Multiple XSS Vulnerabilities Authors: Rachana Shetty...

Limny 3.0.1 Cross Site Scripting

Limny 3.0.1 login.php Remote URI Based Cross-Site Scripting Vulnerability Vendor: Hamidreza Samak Product web page: http://www.limny.org Affected version: 3.0.1 Summary: Limny is a free and open-source content management framework with a focus on ease to use and develop. It can be used as a stabl...

APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability

This host is running APC PowerChute Business Edition and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpowerchutebusinessedtnxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability...

Multiple XSS vulnerabilities in XOOPS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in XOOPS, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Multiple Cross-Site Scripting XSS in XOOPS: CVE-2012-0984 1.1 Input passed via the "touserid" POST parameter to /modules/pm/pmlite.php ...

Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability

The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...

OCS Inventory NG Persistent Cross-site Scripting Vulnerability

This host is running OCS Inventory NG and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodocsinventoryngxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ OCS Inventory NG Persistent Cross-site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...