Lasernet CMS 'id' Parameter SQL Injection Vulnerability

Lasernet CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

WordPress ProPlayer Plugin 'playlist-controller.php' Parameter SQL Injection Vulnerability

The ProPlayer plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

MS11-061: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250) (uncredentialed check)

The version of Remote Desktop Web Access running on the remote host has a reflected cross-site scripting vulnerability. Input to the 'ReturnUrl' parameter of login.aspx is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL,...

MS11-061: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250)

The version of Remote Desktop Web Access running on the remote host has a reflected cross-site scripting vulnerability. Input to the 'ReturnUrl' parameter of login.aspx is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL,...

jCart 1.1 my-item-name POST Parameter XSS

The remote web server hosts jCart. Nessus was able to trigger a cross-site scripting vulnerability against one of the PHP scripts. In addition, this web application is likely to be affected by uncontrolled redirection and affected by cross-site request forgery vulnerabilities, although Nessus has...

Joomla Xeslidegalf Component SQL Injection Vulnerability

This host is running Joomla Xeslidegalf component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomxeslidegalfsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Xeslidegalf Component SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright ...

Fedora 15 : phpMyAdmin-3.4.3.2-1.fc15 (2011-9734)

Changes for 3.4.3.2 2011-07-23 - PMASA-2011-9 XSS in table Print view http://www.phpmyadmin.net/homepage/security/PMASA-2011 -9.php - PMASA-2011-10 Local file inclusion via a crafted MIME-type transformation parameter http://www.phpmyadmin.net/homepage/security/PMASA-20 11-10.php - PMASA-2011-11...

Joomla Component 'com_astra' SQLi Vulnerability

Joomla Astra component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Xeslidegalf Component SQLi Vulnerability

Joomla Xeslidegalf component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 14 : phpMyAdmin-3.4.3.2-1.fc14 (2011-9725)

Changes for 3.4.3.2 2011-07-23 - PMASA-2011-9 XSS in table Print view http://www.phpmyadmin.net/homepage/security/PMASA-2011 -9.php - PMASA-2011-10 Local file inclusion via a crafted MIME-type transformation parameter http://www.phpmyadmin.net/homepage/security/PMASA-20 11-10.php - PMASA-2011-11...

Joomla Component 'com_astra' SQL Injection Vulnerability

This host is running Joomla Astra component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomastrasqlinjvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Joomla Component 'comastra' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities

This host is running ManageEngine ServiceDesk Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusmultxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities Authors: An...

S40 Content Management System (CMS) Cross-Site Scripting Vulnerability

S40 Content Management System CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities

This host is running Andy's PHP Knowledgebase and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbaphpkbmultxssvuln.nasl 5840 2017-04-03 12:02:24Z cfi $ Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright...

Andy's PHP Knowledgebase Multiple Cross-Site Scripting Vulnerabilities

Andy SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:aphpkb:aphpkb"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.802225";...

AlphaRegistration Component for Joomla! 'email' Parameter SQLi

The version of the AlphaRegistration Component for Joomla! running on the remote host is affected by a SQL injection vulnerability in assets/scripts/checkemail.php due to improper sanitization of user-supplied input to the 'email' parameter before using it to construct database queries. Provided...

Joomla com_yvhotels SQLi Vulnerability

Joomla yvhotels component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Resman XSS Vulnerability

Joomla Resman component is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Open Source CERT Security Advisory 2011.001

File 1: oCERT-2011-001 File 2: JAHx113.txt ================================================== 2011-001 Chyrp input sanitization errors Description: The Chyrp framework, an open source blogging engine, suffers from cross-site scripting XSS and local file inclusion LFI vulnerabilities. Insufficient...

RHEL 5 : kernel (RHSA-2011:0927)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0927 advisory. - kernel: IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4649, CVE-2011-1044 - kernel: panic in ibcm:cmworkhandler...