SupportPRO SupportDesk 3.0 - 'shownews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Omnistar Live 7.1 XSS

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Omnistar Live 7.1 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.omnistarlive.com/overview.htm Greetings :...

PHP Photo Vote 1.3F - page Cross-Site Scripting

PHP Photo Vote 1.3F - page Cross-Site Scripting source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

PHP Easy Shopping Cart 3.1R - 'subitems.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44142/info PHP Easy Shopping Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a...

AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Silurus Classifieds - 'wcategory.php?ID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormsmplbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

68 Classifieds 4.1 - category.php Cross-Site Scripting

68 Classifieds 4.1 - category.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Basilic 1.5.13 - index.php Cross-Site Scripting

Basilic 1.5.13 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43372/info Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

WebAsyst Shop-Script PREMIUM - 'SearchString' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43380/info Shop-Script PREMIUM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Cross-site scripting vulnerability in RevoCounter CGI (Animation Counter)

Overview RevoCounter CGI Animation Counter from futomi's CGI Cafe contains a cross-site scripting vulnerability. RevoCounter CGI Animation Counter from futomi's CGI Cafe is a software that displays an animated counter on a webpage. RevoCounter CGI Animation Counter contains a cross-site scripting...

WebShop Hun 1.062s - index.php Local File Inclusion Cross-Site Scripting

WebShop Hun 1.062s - index.php Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/43429/info WebShop Hun is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker...

SkaLinks 1.5 - cat Multiple Cross-Site Scripting Vulnerabilities

SkaLinks 1.5 - cat Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43430/info SkaLinks is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WebShop Hun 1.062s - '/index.php' Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43429/info WebShop Hun is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversa...

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

PHP Scripts Now Hangman - 'index.php?n' SQL Injection

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

MyDLstore Pixel Ad Script - 'payment.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43448/info MyDLstore Pixel Ad Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...