e107 0.7.24 - cmd Remote Command Execution

e107 0.7.24 - cmd Remote Command Execution source: https://www.securityfocus.com/bid/50339/info e107 is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to execute arbitrary commands within the context ...

Oracle AutoVue 20.0.1 - AutoVueX.ocx ActiveX Control ExportEdaBom() Insecure Method

Oracle AutoVue 20.0.1 - AutoVueX.ocx ActiveX Control ExportEdaBom Insecure Method source: https://www.securityfocus.com/bid/50332/info Oracle AutoVue 'AutoVueX.ocx' ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to...

osCommerce - Arbitrary File Upload File Disclosure

osCommerce - Arbitrary File Upload File Disclosure source: https://www.securityfocus.com/bid/50301/info osCommerce is prone to a remote file upload and a file disclosure vulnerability. The issues occur because the application fails to adequately sanitize user-supplied input. An attacker can explo...

1024 CMS <= 1.1.0 Beta LFI Vulnerability - Active Check

1024 CMS 1.1.0 Beta is prone to a local file include LFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Xenon Multiple SQLi Vulnerabilities (Oct 2011) - Active Check

Xenon is prone to multiple SQL injection SQLi vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application or crash the affected application. G-WAN 2.10.6 is...

phpPgAdmin Multiple XSS Vulnerabilities

phpPgAdmin is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BugFree 2.1.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50083/info BugFree is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the...

SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities

SilverStripe CMS 2.4.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50063/info SilverStripe is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability

Apache HTTP Server is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

MyBB Compromised Source Packages Backdoor Vulnerability

MyBB is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; if description...

GoAhead Web Server 2.18 - 'addgroup.asp?group' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50039/info GoAhead WebServer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser...

Bitweaver Multiple Cross-Site Scripting Vulnerabilities

Bitweaver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Perl 5.x - Digest Module Digest-new() Code Injection

Perl 5.x - Digest Module Digest-new Code Injection source: https://www.securityfocus.com/bid/49911/info The Digest module for Perl is prone to a vulnerability that will let attackers inject and execute arbitrary Perl code. Remote attackers can exploit this issue to run arbitrary code in the conte...

Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49853/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

IBM WebSphere Application Server < 8.0.0.1 CSRF Vulnerability

IBM WebSphere Application Server is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

Vanira CMS - vtpidshow SQL Injection

Vanira CMS - vtpidshow SQL Injection source: https://www.securityfocus.com/bid/49789/info Vanira CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit will allow an attacker to...

AdaptCMS 2.0.1 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/49769/info AdaptCMS is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to obtain potentially sensitive...

i-Gallery 3.4 - 'd' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49712/info i-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

WordPress Annonces Plugin 'abspath' Parameter RFI Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; if description...