146 matches found
CVE-2006-2963
Cross-site scripting XSS vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote attackers to inject arbitrary web script or HTML via the suchtext parameter...
[MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS
MajorSecurity 13Cabacos Web CMS= 3.8 - XSS ---------------------------------------------- Software: Cabacos Web CMS Version: =3.8.498 Type: Cross site scripting Date: June, 10th 2006 Vendor: IT-Direkt Page: http://www.cabacos-web-cms.de Credits: ---------------------------- Discovered by: David...
CVE-2004-2210
Technical details about CVE-2004-2210 are not publicly available in the provided Connected documents. Monitor for updates from vendors and security advisories.
CVE-2004-2210
Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...
[SA12839] Express-Web Content Management System Unspecified Cross-Site Scripting
TITLE: Express-Web Content Management System Unspecified Cross-Site Scripting SECUNIA ADVISORY ID: SA12839 VERIFY ADVISORY: http://secunia.com/advisories/12839/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Express-Web Content Management System...
[XSS] PHP-Nuke 7.4 DelAdmin Bug
CODEBUG Labs Advisory 2 Title: DelAdmin Bug Author: Pierquinto 'Mantra' Manco Product: PHP-Nuke 7.4 Type: XSS Web: http://www.mantralab.org Delete Admin Bug - Description PHP-Nuke is a very bugged web CMS, version 7.4 has critical XSS bug that permit to an attacker to delete any Admin account...