DC++ < 0.674 File Content Manipulation

Binary data 2813.prm...

ProductCart Multiple Input Validation Vulnerabilities

The remote host is running a version of the ProductCart shopping cart software that suffers from several input validation vulnerabilities: - SQL Injection Vulnerabilities The 'advSearchh.asp' script fails to sanitize user input to the 'idCategory', and 'resultCnt' parameters, allowing an attacker...

PhotoPost Pro 5.1 - showmembers.php Multiple Cross-Site Scripting Vulnerabilities

PhotoPost Pro 5.1 - showmembers.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12920/info Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied...

PhotoPost Pro 5.1 - showphoto.php?photo SQL Injection

PhotoPost Pro 5.1 - showphoto.php?photo SQL Injection source: https://www.securityfocus.com/bid/12920/info Multiple input validation vulnerabilities reportedly affect PhotoPost Pro. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to...

Phorum 3.x/5.0.x - HTTP Response Splitting

source: https://www.securityfocus.com/bid/12869/info A remote HTTP response splitting vulnerability reportedly affects Phorum. This issue is due to a failure of the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent...

Nuked-klaN 1.x - Submit Link Function HTML Injection

Nuked-klaN 1.x - Submit Link Function HTML Injection source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the...

Nuked-klaN 1.x - Submit Link Function HTML Injection

source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the 'website name' input field of the NuKed-Klan submit UR...

S9Y Serendipity 0.x - exit.php HTTP Response Splitting

S9Y Serendipity 0.x - exit.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11497/info Serendipity is reported prone to an HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or...

WordPress Core 1.2 - 'wp-login.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11348/info Wordpress is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remote attacker may exploit this...

WordPress 1.2 - wp-login.php HTTP Response Splitting

WordPress 1.2 - wp-login.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11348/info Wordpress is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests a...

DCP-Portal 3.7/4.x/5.x - 'calendar.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11340/info DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remote attacker may exploit this...

DCP-Portal 3.74.x5.x - calendar.php HTTP Response Splitting

DCP-Portal 3.74.x5.x - calendar.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11340/info DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET...

Snitz Forums 2000 - down.asp HTTP Response Splitting

Snitz Forums 2000 - down.asp HTTP Response Splitting source: https://www.securityfocus.com/bid/11201/info Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected...

Snitz Forums 2000 - 'down.asp' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11201/info Snitz Forums is reported prone to a HTTP response splitting vulnerability. The issue exists in a parameter of the 'down.asp' script. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET...

Comersus Cart 5.0 - HTTP Response Splitting

source: https://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This could aid in various attacks, which...

Land Down Under - BBCode HTML Injection

Land Down Under - BBCode HTML Injection source: https://www.securityfocus.com/bid/10435/info Land Down Under is prone to an HTML injection vulnerability. This issue is exposed through their BBCode implementation. Exploitation could permit theft of cookie credentials, manipulation of content, or...

Land Down Under - BBCode HTML Injection

source: https://www.securityfocus.com/bid/10435/info Land Down Under is prone to an HTML injection vulnerability. This issue is exposed through their BBCode implementation. Exploitation could permit theft of cookie credentials, manipulation of content, or other attacks...

PHProfession 2.5 - upload.php Direct Request Full Path Disclosure

PHProfession 2.5 - upload.php Direct Request Full Path Disclosure source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabiliti...

Protector System 1.15 - blocker_query.php Multiple Cross-Site Scripting Vulnerabilities

Protector System 1.15 - blockerquery.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10206/info Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection...

Protector System 1.15 b1 - index.php SQL Injection

Protector System 1.15 b1 - index.php SQL Injection source: https://www.securityfocus.com/bid/10206/info Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection vulnerabilities were reported. Exploitati...