how to prevent cross site scripting

Released on: 2013-01-01Updated on: Affected Systems:PHP imdb Classes 2-2.1.5Description:--------------------------------------------------------------------------------Bugtraq id: 64542 PHP is an embedded HTML language. PHP imdb 2-2.1.5 and other versions have multiple cross-site scripting vulnerabilities. Attackers can exploit these vulnerabilities to execute

Release date:Updated on: 2013-06-27 Affected Systems:Cisco Content Security ManagementDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-3396Cisco Content Security Management is a unified solution for email and Web Security Management.The Cisco Content Security Management Web framework has a Security vulnerability that allows unauthenticated remote attackers to perform XSS attacks on the Web interface users of the affected system.

Release date: 2013-07-04Updated on: Affected Systems:PhpMyAdmin Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2013-3742 Phpmyadmin is an online management tool for MySQL databases. Its main functions include creating data tables online, running SQL statements, searching and querying data, and importing and exporting data. PhpMyAdmin 4. view_create.php earlier than Version x has a cross

Release date:Updated on: Affected Systems:Apache Group OfBiz 10.4.2Apache Group OfBiz 10.4.1Description:--------------------------------------------------------------------------------Bugtraq id: 57463CVE (CAN) ID: CVE-2013-0177Apache Open For Business (Apache OFBiz) is an Open-source ERP system.Apache versions earlier than 10.04.05 and 11.04.02 have multiple cross-site

Release date:Updated on: Affected Systems:Advantech WebAccess HMI/SCADADescription:--------------------------------------------------------------------------------Bugtraq id: 57227WebAccess HMI/SCADA software provides remote control and management, allowing you to easily view and configure automation devices in the facility management system, power station and building automation system.Advantech WebAccess HMI/SCADA has an unknown cross-

Release date:Updated on: Affected Systems:StatusNet 0.9.8StatusNet 0.8Unaffected system:StatusNet 0.9.9Description:--------------------------------------------------------------------------------Bugtraq id: 49113 StatusNet, formerly Laconica, is an open-source microblog platform software developed using PHP. StatusNet has a cross-site scripting vulnerability i

Release date:Updated on: Affected Systems:Skype (ioS) 3.0.1Description:--------------------------------------------------------------------------------Bugtraq id: 49697 Skype is a free global voice communication software. The "Chat Message" Window of Skype for iOS contains a cross-site scripting vulnerability when filtering user input. Remote attackers can exp

Release date:Updated on: Affected Systems:Symantec IM Manager 8.xUnaffected system:Symantec IM Manager 8.4.18Description:--------------------------------------------------------------------------------Bugtraq id: 49739Cve id: CVE-2011-0552 Symantec IM Manager provides certification support for public and enterprise IM networks and seamlessly manages enterprise instant messaging, it also implements security assurance, logging and archiving-including fine-grained policy enforcement and security co

Release date: 2012-04-23Updated on: 2012-04-23 Affected Systems:Sohuu OA (Office Automation) 2011Description:--------------------------------------------------------------------------------Office Automation is a commercial Office system developed based on PHP and MySQL. The OA Office System has multiple cross-site scripting vulnerabilities, including: Web forms

Release date:Updated on: Affected Systems:Hitachi IT Operations DirectorDescription:--------------------------------------------------------------------------------Hitachi IT Operations Director is a system management software that automates client IT infrastructure lifecycle tasks. Hitachi IT Operations Director 02-50-01 to 02-50-07 and 03-03-03-00-07 have Implementation Vulnerabilities, which can be exploited by malicious users to execute cross-

Release date:Updated on: Affected Systems:Horde IMP Horde Groupware Webmail Edition Unaffected system:Horde IMP 5.0.21Horde Groupware Webmail Edition 4.0.8Description:--------------------------------------------------------------------------------Bugtraq id: 53435 IMP is an internet messaging program written in PHP. It provides webpage email access and rich Web message transmission for IMAP and POP3 accounts. The Horde IMP Webmail client earlier than IMP 5.0.21 has multiple

Release date: 2011-12-13Updated on: 2011-12-14 Affected Systems:Adobe ColdFusion 9.0.1Adobe ColdFusion 9.0Adobe ColdFusion 8.0.1Adobe ColdFusion 8.0Description:--------------------------------------------------------------------------------Bugtraq id: 51043Cve id: CVE-2011-4368 Adobe ColdFusion is a dynamic Web server. Adobe ColdFusion has a cross-site scripting