S9Y Serendipity 1.5.5 - serendipity[filter][bp.ALT] Cross-Site Scripting

S9Y Serendipity 1.5.5 - serendipityfilterbp.ALT Cross-Site Scripting source: https://www.securityfocus.com/bid/50502/info Serendipity is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

phpLDAPadmin '_debug' Cross Site Scripting Vulnerability

This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadmindebugxssvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ phpLDAPadmin 'debug' Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

S9Y Serendipity 1.5.5 - 'serendipity[filter][bp.ALT]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50502/info Serendipity is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

IBSng 'str' Parameter Cross Site Scripting Vulnerability

IBSng is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal...

Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

Joomla! Alameda Component 'storeid' Parameter SQLi Vulnerability

The Alameda component for Joomla! is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...

IBSng B1.34(T96) - 'str' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50468/info IBSng is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Plici Search 2.0.0.Stable.r.1878 - 'p48-search.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in an unsuspecting user's browser in the context ...

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting

Plici Search 2.0.0.Stable.r.1878 - p48-search.html Cross-Site Scripting source: https://www.securityfocus.com/bid/50428/info Plici is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities (2)

vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/50364/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/50364/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XAMPP 1.7.4 - Cross-Site Scripting

XAMPP 1.7.4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/50381/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the brows...

XAMPP 1.7.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50381/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Tine Multiple Cross Site Scripting Vulnerabilities

Tine is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to steal...

RuubikCMS 'f' Parameter Information Disclosure Vulnerability

RuubikCMS is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information; other attack...

e107 0.7.24 - 'cmd' Remote Command Execution

source: https://www.securityfocus.com/bid/50339/info e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable application. e107 0.7.24 ...

e107 0.7.24 - cmd Remote Command Execution

e107 0.7.24 - cmd Remote Command Execution source: https://www.securityfocus.com/bid/50339/info e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context ...

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities

InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50344/info InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these...

osCommerce Remote File Upload and File Disclosure Vulnerabilities

osCommerce is prone to a remote file upload and a file disclosure vulnerability. The issues occur because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to upload a file and obtain an arbitrary file SPDX-FileCopyrightText: 2011 Greenbone AG...

Splunk 4.1.6 - segment Cross-Site Scripting

Splunk 4.1.6 - segment Cross-Site Scripting source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in a...