orion.extfeedbackform Bitrix Module SQL Injection Vulnerability

An SQL injection vulnerability exists in the orion.extfeedbackform Bitrix module. Due to insufficient filtering of input passed to the "/bitrix/admin/orion.extfeedbackformefbfforms.php" script via the "order" and "by" HTTP GET parameters, an attacker can exploit the vulnerability to execute SQL...

F5 FirePass 4100 SSL VPN Download_Plugin.PHP3跨站脚本漏洞

BUGTRAQ ID: 26412 CNCAN ID:CNCAN-2007111602 PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'downloadplugin.php3' server-side script F5 FirePass是一款安全套接层虚拟专用网SSL VPN解决方案。 F5 FirePass包含的DownloadPlugin.PHP3不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击获得敏感信息。...

CVE-2004-1719

Multiple cross-site scripting XSS vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 category, 2 cserver, 3 ext, 4 global, 5 showgroups, 6 or showlite parameters to address.html, or the 7 spage or 8 autoresponder parameters to...