1180 matches found
Joomla! Component com_contushdvideoshare 1.3 - id SQL Injection
Joomla! Component comcontushdvideoshare 1.3 - id SQL Injection source: https://www.securityfocus.com/bid/51411/info The HD Video Share 'comcontushdvideoshare' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using...
Gregarius 0.6.1 - Multiple SQL Injections Cross-Site Scripting
Gregarius 0.6.1 - Multiple SQL Injections Cross-Site Scripting source: https://www.securityfocus.com/bid/51338/info Gregarius is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...
SenseSites CommonSense CMS - 'special.php?id' SQL Injection
source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...
StatIt 4 - statistik.php Multiple Cross-Site Scripting Vulnerabilities
StatIt 4 - statistik.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51280/info StatIt is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execu...
StatIt 4 - 'statistik.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/51280/info StatIt is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Limny 3.0.1 - 'login.php' Script Cross-Site Scripting
source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...
Video Community Portal - userID SQL Injection
Video Community Portal - userID SQL Injection source: https://www.securityfocus.com/bid/51108/info Video Community Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting
WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting source: https://www.securityfocus.com/bid/50860/info 1-jquery-photo-gallery-slideshow-flash plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize...
Hastymail2 - 'rs' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50789/info Hastymail2 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...
GoAhead Web Server 2.5 - goformformTest Multiple Cross-Site Scripting Vulnerabilities
GoAhead Web Server 2.5 - goformformTest Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50729/info GoAhead WebServer is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...
Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Cacti is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user- supplied data. Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify...
phpAlbum Multiple Security Vulnerabilities
phpAlbum is prone to an arbitrary-file-download vulnerability, multiple cross-site scripting vulnerabilities, and multiple PHP code- injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary script code in the...
phpAlbum Multiple Security Vulnerabilities
phpAlbum is prone to an arbitrary-file-download vulnerability, multiple cross-site scripting vulnerabilities, and multiple PHP code- injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary script code in the...
InverseFlow Multiple Cross Site Scripting Vulnerabilities
InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to...
InverseFlow 2.4 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50344/info InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of...
Splunk 4.1.6 - segment Cross-Site Scripting
Splunk 4.1.6 - segment Cross-Site Scripting source: https://www.securityfocus.com/bid/50296/info Splunk is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in a...
Tine 2.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/50307/info Tine is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the...
Netvolution 2.5.8 - 'referer' Header SQL Injection
source: https://www.securityfocus.com/bid/49918/info Netvolution is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities
Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49787/info Adobe ColdFusion is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit...
