PHP vulnerable to cross-site scripting

Overview PHP contains a cross-site scripting vulnerability. PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Tomoki Sanaki of International Network Security, Inc. report...

Unfixed XSS vulnerability at www.thepulsarband.com

Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting www.thepulsarband.com, which at the time of submission ranked 20347078 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It ...

tomcat: Cross-Site-Scripting enabled by sendError call

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

Unfixed XSS vulnerability at www.carfreeday.ca

Security researcher xylitol, has submitted on 12/08/2008 a cross-site-scripting XSS vulnerability affecting www.carfreeday.ca, which at the time of submission ranked 11145476 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It is...

CVE-2008-5067

CVE-2008-5067 describes a cross-site scripting (XSS) vulnerability in Kmita Catalogue 2.x, exploitable via search.php parameter q. The connected records confirm the affected software (Kmita Catalogue 2.x) and the vulnerable entry point (search.php), with the underlying issue being improper handli...

Unfixed XSS vulnerability at www.ifoods.tv

Security researcher xylitol, has submitted on 11/11/2008 a cross-site-scripting XSS vulnerability affecting www.ifoods.tv, which at the time of submission ranked 70726 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/11/2008. It is currently...

Unfixed XSS vulnerability at www.akhisarli.com

Security researcher BuRaX, has submitted on 11/10/2008 a cross-site-scripting XSS vulnerability affecting www.akhisarli.com, which at the time of submission ranked 7190562 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is...

Unfixed XSS vulnerability at www.ebace.aero

Security researcher xylitol, has submitted on 11/07/2008 a cross-site-scripting XSS vulnerability affecting www.ebace.aero, which at the time of submission ranked 1383553 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2008. It is current...

Unfixed XSS vulnerability at sourcecodeguru.com

Security researcher BackDoor, has submitted on 11/03/2008 a cross-site-scripting XSS vulnerability affecting sourcecodeguru.com, which at the time of submission ranked 11222920 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at www.davisandelkins.edu

Security researcher Tr0jAn, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting www.davisandelkins.edu, which at the time of submission ranked 1616930 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed XSS vulnerability at www.cppgameprogramming.com

Security researcher Mystick, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting www.cppgameprogramming.com, which at the time of submission ranked 918775 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It...

Unfixed XSS vulnerability at aviation-safety.net

Security researcher xylitol, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting aviation-safety.net, which at the time of submission ranked 93845 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2008. It is...

Unfixed XSS vulnerability at wiki.horde.org

Security researcher xylitol, has submitted on 26/10/2008 a cross-site-scripting XSS vulnerability affecting wiki.horde.org, which at the time of submission ranked 62212 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/10/2010. It is currently...

Unfixed XSS vulnerability at www.mindpowerindia.com

Security researcher Vinod Sharma, has submitted on 22/10/2008 a cross-site-scripting XSS vulnerability affecting www.mindpowerindia.com, which at the time of submission ranked 80822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It...

Unfixed XSS vulnerability at www.healthcareitnews.com

Security researcher skathgh420, has submitted on 19/10/2008 a cross-site-scripting XSS vulnerability affecting www.healthcareitnews.com, which at the time of submission ranked 174960 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. I...

Unfixed XSS vulnerability at www.corpoff.com

Security researcher skathgh420, has submitted on 15/10/2008 a cross-site-scripting XSS vulnerability affecting www.corpoff.com, which at the time of submission ranked 2380571 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

tomcat: Cross-Site-Scripting enabled by sendError call

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the HttpServletResponse.sendError method...

Unfixed XSS vulnerability at www.islamicuniversity.nl

Security researcher Denven, has submitted on 23/09/2008 a cross-site-scripting XSS vulnerability affecting www.islamicuniversity.nl, which at the time of submission ranked 2872504 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It i...

Kim Websites 1.0 (fckeditor) Remote Arbitrary File Upload Vulnerability

No description provided by source. S4rK3VT Hacking TEAM Title: KimWebsite fckeditor Remote Arbitrary File Upload Vendor: http://sourceforge.net/project/showfiles.php?groupid=196819 discover by : Ciph3r We Are : Ciph3r & Rake [email protected] Impact: Medium Fix: N/A Expl0ters Security TEAM...

DEBIAN-CVE-2008-3714

Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the querystring, a different vulnerability than CVE-2006-3681 and CVE-2006-1945...