Webmedia Explorer 6.13.1 - Persistent Cross-Site Scripting

Vulnerability ID: HTB22661 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinwebmediaexplorer.html Product: Webmedia Explorer Vendor: Marc Salmurri http://www.webmediaexplorer.com/ Vulnerable Version: 6.13.1 and probably prior versions Vendor Notification: 19 October 2010...

Cross-site Scripting (XSS) Vulnerabilities in Webmedia Explorer

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmedia Explorer which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in Webmedia Explorer The vulnerability exists due to input...

Webmedia Explorer Multiple Cross Site Scripting Vulnerabilities

Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may all...

Webmedia Explorer Detection

This host is running Webmedia Explorer, a free Open Source PHP engine that reads your hard disc as a conventional disc explorer and generates a website realtime taking advantage of a very powerful rendering and data fetching caching system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text...

Webmedia Explorer Detection

This host is running Webmedia Explorer an free Open Source PHP engine that reads your hard disc as a conventional disc explorer and generates a website realtime taking advantage of a very powerful rendering and data fetching caching system. OpenVAS Vulnerability Test $Id:...

Webmedia Explorer Multiple Cross Site Scripting Vulnerabilities

Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

CVE-2009-2107

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

CVE-2009-2107

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

[InterN0T] Webmedia Explorer - XSS Vulnerability

Webmedia Explorer - Cross Site Scripting Vulnerability Version Affected: 5.0.9 newest is: 5.10.0 Info: Webmedia Explorer is the alternative CMS engine that reads the hard disc and generates a website realtime taking advantage of a very powerful rendering and data fetching caching system. Credits:...

Webmedia Explorer 5.0.9/5.10 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities

Webmedia Explorer 5.0.95.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35368/info Webmedia Explorer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

CVE-2007-4948

Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer webmex 3.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the pathinclude parameter to includes/rss.class.php, 2 a URL in the pathtemplate parameter to a templates/main.tpl.php or b...

CVE-2006-5252

CVE-2006-5252 affects Webmedia Explorer 2.8.7. A PHP remote file inclusion is possible via the path_include parameter in includes/core.lib.php, allowing remote attackers to execute arbitrary PHP code by supplying a crafted URL. The NVD entry lists a base score of 5.1 (Medium) with network attack ...