GlassFish Application Server - '/Applications/lifecycleModulesNew.jsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Vim 7.x - Vim Script Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/29715/info Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges o...

Hot Links SQL-PHP - Multiple Cross-Site Scripting Vulnerabilities

Hot Links SQL-PHP - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29632/info Hot Links SQL-PHP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

TorrentTrader Classic 1.x - 'scrape.php' SQL Injection

source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

DZOIC Handshakes 3.5 - fname SQL Injection

DZOIC Handshakes 3.5 - fname SQL Injection source: https://www.securityfocus.com/bid/29353/info DZOIC Handshakes is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

DizaynPlus Nobetci Eczane Takip 1.0 - 'ayrinti.asp' SQL Injection

source: https://www.securityfocus.com/bid/29300/info DizaynPlus Nobetci Eczane Takip is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Kalptaru Infotech Automated Link Exchange Portal - 'linking.page.php' SQL Injection

source: https://www.securityfocus.com/bid/29205/info Automated Link Exchange Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

phpMyAgenda 2.1 - infoevent.php3 Remote File Inclusion

phpMyAgenda 2.1 - infoevent.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/29164/info PhpMyAgenda is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

ZYWALL Referer Header XSS Vulnerability

Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...

TLM CMS 1.1 - index.php Multiple SQL Injections

TLM CMS 1.1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/29049/info TLM CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Maian Uploader 4.0 - header.php Cross-Site Scripting

Maian Uploader 4.0 - header.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

Maian Uploader 4.0 - 'keywords' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

EJ3 BlackBook 1.0 - header.php Multiple Cross-Site Scripting Vulnerabilities

EJ3 BlackBook 1.0 - header.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29015/info BlackBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

W2B Online Banking - ilang Remote File Inclusion

W2B Online Banking - ilang Remote File Inclusion source: https://www.securityfocus.com/bid/28796/info W2B Online Banking is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...

Pligg CMS 9.9.0 (editlink.php id) Remote SQL Injection Vulnerability

No description provided by source. Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

Prozilla Gaming Directory 1.0 - SQL Injection

Prozilla Gaming Directory 1.0 - SQL Injection source: https://www.securityfocus.com/bid/28676/info Prozilla Gaming Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

RobotStats 0.1 - graph.php?DOCUMENT_ROOT Remote File Inclusion

RobotStats 0.1 - graph.php?DOCUMENTROOT Remote File Inclusion source: https://www.securityfocus.com/bid/28615/info RobotStats is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

RobotStats 0.1 - 'graph.php?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28615/info RobotStats is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...

mcGallery 1.1 - show.php?lang Cross-Site Scripting

mcGallery 1.1 - show.php?lang Cross-Site Scripting source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary scri...

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...