AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30730/info AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Intrinsic Swimage Encore does not securely manage login credentials

Overview Intrinsic Swimage Encore has an unencrypted, hardcoded, default password that could allow an attacker access to protected data. Description Intrinsic Swimage Encore automates remote desktop, server, and device deployment. This product includes both a server and a client solution. The...

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting

Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30709/info FlexCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

FlexCMS 2.5 - inc-core-admin-editor-previouscolorsjs.php Cross-Site Scripting

FlexCMS 2.5 - inc-core-admin-editor-previouscolorsjs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30709/info FlexCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfig_sitename Cross-Site Scripting

Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfigsitename Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...

Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30687/info Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the contex...

Datafeed Studio 1.6.2 - search.php Cross-Site Scripting

Datafeed Studio 1.6.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30660/info Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrar...

IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30665/info PhPLinkExchange is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Kayako SupportSuite 3.x - 'index.php?filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30642/info Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because the application fails to...

Kayako SupportSuite 3.x - staffindex.php?customfieldlinkid SQL Injection

Kayako SupportSuite 3.x - staffindex.php?customfieldlinkid SQL Injection source: https://www.securityfocus.com/bid/30642/info Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection...

Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting

Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30635/info GooCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitra...

Kayako SupportSuite 3.x - '/staff/index.php?customfieldlinkid' SQL Injection

source: https://www.securityfocus.com/bid/30642/info Kayako SupportSuite is prone to multiple input-validation vulnerabilities, including an SQL-injection issue, multiple cross-site scripting issues, and an HTML-injection issue. The vulnerabilities occur because the application fails to...

Yogurt Social Network 3.2 rc1 Module for XOOPS - scrapbook.php?uid Cross-Site Scripting

Yogurt Social Network 3.2 rc1 Module for XOOPS - scrapbook.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities

RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30616/info RMSOFT MiniShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Yogurt Social Network 3.2 rc1 Module for XOOPS - 'tribes.php?uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Yogurt Social Network 3.2 rc1 Module for XOOPS - friends.php?uid Cross-Site Scripting

Yogurt Social Network 3.2 rc1 Module for XOOPS - friends.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30616/info RMSOFT MiniShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Yogurt Social Network 3.2 rc1 Module for XOOPS - 'index.php?uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...