Published: 26/09/2006 Updated: 17/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 540

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Subscribe to Grayscale

Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote malicious users to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text parameter in adminpanel/includes/mailinglist/sendemail.php, (3) the this_year parameter in includes/footer.php, and the band parameter in (4) adminpanel/includes/helpfiles/help_news.php (5) adminpanel/includes/helpfiles/help_merch.php, (6) adminpanel/includes/header.php, and (7) adminpanel/login_header.php; and includes/content/ files including (8) bio_content.php, (9) gbook_content.php, (10) interview_content.php, (11) links_content.php, (12) lyrics_content.php, (13) member_content.php, (14) merch_content.php, (15) mp3_content.php, (16) news_content.php, (17) pastshows_content.php, (18) photo_content.php, (19) releases_content.php, (20) reviews_content.php, (21) shows_content.php, and (22) signgbook_content.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
grayscale bandsite cms 1.1

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of t ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code i ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the contex ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the a ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webser ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserve ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affec ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webs ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the cont ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the aff ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected we ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affected webserver, ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the affecte ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of the ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in th ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the co ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code ...

source: wwwsecurityfocuscom/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data These issues may allow an attacker to access sensitive information, execute arbitrary server-side script code in the context of ...

CWE-79 http://www.securityfocus.com/bid/20137 http://secunia.com/advisories/21992 http://securityreason.com/securityalert/1634 http://www.securityfocus.com/archive/1/446576/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/28628/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook