QuickPayPro 3.1 - sales.view.php?customerid SQL Injection

QuickPayPro 3.1 - sales.view.php?customerid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...

QuickPayPro 3.1 - subscribers.tracking.edit.php?subtrackingid SQL Injection

QuickPayPro 3.1 - subscribers.tracking.edit.php?subtrackingid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

McGallery 1.01.12.2 - show.php Multiple SQL Injections

McGallery 1.01.12.2 - show.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

VCD-db 0.9x - 'search.php?by' SQL Injection

source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

DRZES Hms 3.2 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15766/info DRZES HMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

Tunez 1.21 - 'search.php?searchFor' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the SQL injection issue could result in a compromise of the...

MySource 2.14 - edit_table_cell_type_wysiwyg.php?Stylesheet Cross-Site Scripting

MySource 2.14 - edittablecelltypewysiwyg.php?Stylesheet Cross-Site Scripting source: https://www.securityfocus.com/bid/15132/info MySource is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14767/info phpCommunityCalendar is prone to multiple remote cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An...

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14751/info MAXdev MD-Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

Mantis Bug Tracker 0.x1.0 - Multiple Input Validation Vulnerabilities

Mantis Bug Tracker 0.x1.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/14604/info Mantis is prone to multiple input validation vulnerabilities. These issues involve cross-site scripting, HTML injection and variable poisoning, and are due to a failure in th...

Calendar Express 2.2 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14505/info Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Clever Copy 2.0 - 'categorysearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14395/info Clever Copy is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

CVE-2004-2210

Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...

ASPNuke 0.80 - forgot_password.asp?email Cross-Site Scripting

ASPNuke 0.80 - forgotpassword.asp?email Cross-Site Scripting source: https://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

ATutor 1.4.3 - content.php?cid Cross-Site Scripting

ATutor 1.4.3 - content.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of...

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/13910/info Multiple input validation vulnerabilities reportedly affect Invision Community Blog. These issues are due to a failure of the application to properly sanitize...

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

NPDS 4.8 5.0 - links.php?Query SQL Injection

NPDS 4.8 5.0 - links.php?Query SQL Injection source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attack...

Spread The Word - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13733/info Spread The Word is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed...