JGS-Portal 3.0.13.0.2 - jgs_portal_sponsor.php?id SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalsponsor.php?id SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_viewsgraf.php?tag' SQL Injection

source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of the SQL injection issues could...

MyBloggie 2.1 - index.php Cross-Site Scripting

MyBloggie 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13507/info myBloggie is affected by multiple vulnerabilities. An attacker may leverage these issues to carry out cross-site scripting, HTML injection and SQL injection attacks against the affected application...

FishCart 3.1 - display.php?psku SQL Injection

FishCart 3.1 - display.php?psku SQL Injection source: https://www.securityfocus.com/bid/13499/info FishCart is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit of the SQL-injection...

Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting

Gossamer Threads Links 2.x - User.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/13484/info Gossamer Threads Links is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

ProfitCode Software PayProCart 3.0 - AdminShop HDoc Cross-Site Scripting

ProfitCode Software PayProCart 3.0 - AdminShop HDoc Cross-Site Scripting source: https://www.securityfocus.com/bid/13305/info PayProCart is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

PHP Labs - .proFile Dir URI Cross-Site Scripting

PHP Labs - .proFile Dir URI Cross-Site Scripting source: https://www.securityfocus.com/bid/13276/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is...

PHP Labs - '.proFile' Dir URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/13276/info PHP Labs proFile is prone to a cross-site scripting vulnerability. As a result, attackers may embed hostile HTML and script code in a malicious link to the affected application. If the link is followed, the code may be rendered by the victim's...

CityPost Simple PHP Upload - Simple-upload-53.php Cross-Site Scripting

CityPost Simple PHP Upload - Simple-upload-53.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13261/info CityPost Simple PHP Upload is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to...

RadScripts RadBids Gold 2.0 - 'faq.php?farea' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

Active Auction House - sendpassword.asp Multiple Cross-Site Scripting Vulnerabilities

Active Auction House - sendpassword.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13038/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...

Valdersoft Shopping Cart 3.0 - Multiple Input Validation Vulnerabilities

Valdersoft Shopping Cart 3.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12916/info Multiple input validation vulnerabilities reportedly affect Valdersoft Shopping Cart. These issues are due to a failure of the application to properly sanitize user-suppli...

ESMI PayPal StoreFront 1.7 - Cross-Site Scripting

ESMI PayPal StoreFront 1.7 - Cross-Site Scripting source: https://www.securityfocus.com/bid/12904/info ESMI PayPal Storefrom is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage th...

DigitalHive 2.0 - 'membres.php?mt' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12883/info DigitalHive is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed i...

Zorum < 3.6.0 Multiple Vulnerabilities

Binary data 2692.prm...

YaBB YaBB.pl usersrecentposts Action username Parameter XSS

The installed version of YaBB Yet Another Bulletin Board on the remote host suffers from a remote cross-site scripting flaw due to its failure to properly sanitize input passed via the 'username' parameter and used as part of the 'usersrecentposts' action. By exploiting this flaw, a remote attack...

D-Forum 1.11 - Nav.php3 Cross-Site Scripting

D-Forum 1.11 - Nav.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/12720/info D-Forum is reportedly affected by a cross-site scripting vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. As a result of this vulnerability, it is...

phpMyAdmin 2.6 - 'display_tbl_links.lib.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12644/info Multiple remote cross-site scripting vulnerabilities affect phpMyAdmin. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. An attacker may...