PostNuke 0.6x/0.7x NS-Languages Module - 'language' SQL Injection

source: https://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to compromise the application, access or...

QwikiWiki 1.5 - search.php Cross-Site Scripting

QwikiWiki 1.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16638/info QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated...

vBulletin 3.5.2 - Event Title HTML Injection

vBulletin 3.5.2 - Event Title HTML Injection source: https://www.securityfocus.com/bid/16116/info vBulletin is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities

SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16243/info SimpleBlog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...

SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16243/info SimpleBlog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of th...

MyPHPim - 'calendar.php3?cal_id' SQL Injection

source: https://www.securityfocus.com/bid/16210/info MyPhPim is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

TheWebForum 1.2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16161/info TheWebForum is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of t...

FatWire UpdateEngine 6.2 - Multiple Cross-Site Scripting Vulnerabilities

FatWire UpdateEngine 6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16073/info FatWire UpdateEngine is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser...

Commercial Interactive Media SCOOP! 2.3 - prePurchaserRegistration.asp?Invalid Cross-Site Scripting

Commercial Interactive Media SCOOP! 2.3 - prePurchaserRegistration.asp?Invalid Cross-Site Scripting source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the...

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/16002/info Beehive Forum is prone to multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

Quick Square Development Honeycomb Archive 3.0 - 'CategoryResults.cfm' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15995/info HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromis...

Bitweaver 1.1.1 - view_post.php?post_id Cross-Site Scripting

Bitweaver 1.1.1 - viewpost.php?postid Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

Bitweaver 1.1.1 - message_box.php?sort_mode Cross-Site Scripting

Bitweaver 1.1.1 - messagebox.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitati...

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15967/info Mercury CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitatio...

Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/15966/info Komodo CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of th...

Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities

Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15898/info Dick Copits PDEstore is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

QuickPayPro 3.1 - subscribers.tracking.edit.php?subtrackingid SQL Injection

QuickPayPro 3.1 - subscribers.tracking.edit.php?subtrackingid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

QuickPayPro 3.1 - popups.edit.php?popupid SQL Injection

QuickPayPro 3.1 - popups.edit.php?popupid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

QuickPayPro 3.1 - sales.view.php?customerid SQL Injection

QuickPayPro 3.1 - sales.view.php?customerid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...