EasyPublish CMS 23.04.2010 - URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/40037/info EasyPublish CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Friendster Persistent Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Kleophatra CMS 0.1.1 - 'module' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39593/info Kleophatra CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

ViewVC Regular Expression Search Cross Site Scripting Vulnerability

ViewVC is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Direct News Multiple Remote File Include Vulnerabilities

Direct News is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible. Direct News 4.10.2 is vulnerable; other...

Kasseler CMS News Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38909/info Kasseler CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities

Dojo Toolkit 1.4.1 - dohrunner.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues...

CodeIgniter 1.0 - BASEPATH Multiple Remote File Inclusions

CodeIgniter 1.0 - BASEPATH Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/38672/info CodeIgniter is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Friendly-Tech FriendlyTR69 CPE Remote Management 2.8.9 - SQL Injection

========================================= Yaniv Miron aka "Lament" Advisory March 7, 2010 Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability ========================================= ===================== I. BACKGROUND ===================== Based on the company’s...

Luxology Modo 401 .LXO Integer Overflow

Advisory ID Internal CORE-2009-0913 1. Advisory Information Title: Luxology Modo 401 .LXO Integer Overflow Advisory Id: CORE-2009-0913 Date published: 2010-03-02 Date of last update: 2010-03-02 Vendors contacted: Luxology LLC Release mode: User release 2. Vulnerability Information Class: Failure...

Open Educational System 0.1 Beta - CONF_INCLUDE_PATH Multiple Remote File Inclusions

Open Educational System 0.1 Beta - CONFINCLUDEPATH Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

vBulletin Multiple Cross Site Scripting Vulnerabilities

vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

vBulletin 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities

vBulletin 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38339/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

USN-900-1: Ruby vulnerabilities

Emmanouel Kellinis discovered that Ruby did not properly handle certain string operations. An attacker could exploit this issue and possibly execute arbitrary code with application privileges. CVE-2009-4124 Giovanni Pellerano, Alessandro Tanasi, and Francesco Ongaro discovered that Ruby did not...

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38252/info Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied dat...

CommodityRentals CD Rental Software - index.php SQL Injection

CommodityRentals CD Rental Software - index.php SQL Injection source: https://www.securityfocus.com/bid/38184/info CommodityRentals CD Rental Software is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

Site Manager 3.0 - id SQL Injection

Site Manager 3.0 - id SQL Injection source: https://www.securityfocus.com/bid/39973/info Site Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

FlatPress Multiple Cross site Scripting Vulnerabilities

This host is running FlatPress and is prone to multiple Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbflatpressmultxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FlatPress Multiple Cross site Scripting Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010...

DataLife Engine 8.3 - engineinchelp.php?config[langs] Remote File Inclusion

DataLife Engine 8.3 - engineinchelp.php?configlangs Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a...