Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_alerts.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatalerts.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_iplink.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatiplink.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_output_query.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbaseoutputquery.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issu...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_ag_main.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - baseagmain.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_graph_common.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basegraphcommon.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_class.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatclass.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_state_criteria.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbasestatecriteria.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these...

Basic Analysis and Security Engine (BASE) 1.4.5 - setupsetup2.php?ado_inc_PHP Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - setupsetup2.php?adoincPHP Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

LxCenter Kloxo 6.1.10 - Multiple HTML Injection Vulnerabilities

LxCenter Kloxo 6.1.10 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51964/info LxCenter Kloxo is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

ProWiki - id Cross-Site Scripting

ProWiki - id Cross-Site Scripting source: https://www.securityfocus.com/bid/51987/info ProWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ProWiki - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51987/info ProWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Oracle Fusion WebLogic Server Component WLS-Console Management Interface Unspecified XSS

The version of the WebLogic component on Oracle Middleware installed on the remote Windows host is affected an unspecified cross-site scripting vulnerability related to WLS-Console. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the...

project-open 3.4.x - account-closed.tcl Cross-Site Scripting

project-open 3.4.x - account-closed.tcl Cross-Site Scripting source: https://www.securityfocus.com/bid/51842/info project-open is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

project-open 3.4.x - 'account-closed.tcl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51842/info project-open is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

iknSupport search Module - Cross-Site Scripting

iknSupport search Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/51803/info iknSupport is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

GForge 5.7.1 - Multiple Cross-Site Scripting Vulnerabilities

GForge 5.7.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51799/info GForge is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execu...

Joomla! Component Currency Converter 1.0.0 - from Cross-Site Scripting

Joomla! Component Currency Converter 1.0.0 - from Cross-Site Scripting source: https://www.securityfocus.com/bid/51804/info The Currency Converter component for Joomla! is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

GForge 5.7.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51799/info GForge is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal...

iknSupport 'search' Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/51803/info iknSupport is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...