PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

WinHKI 1.41.51.6 - Directory Traversal

WinHKI 1.41.51.6 - Directory Traversal source: https://www.securityfocus.com/bid/17153/info Reportedly, an attacker can carry out directory-traversal attacks. These issues present themselves when the application processes malformed archives. A successful attack can allow the attacker to place...

PHPX 3.5.9 - XCode Tag HTML Injection

PHPX 3.5.9 - XCode Tag HTML Injection source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code woul...

Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities

Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

PostNuke 0.6x0.7x NS-Languages Module - language SQL Injection

PostNuke 0.6x0.7x NS-Languages Module - language SQL Injection source: https://www.securityfocus.com/bid/16752/info PostNuke is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation...

Magic Calendar Lite 1.02 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16734/info Magic Calendar Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to...

Magic Calendar Lite 1.02 - index.php SQL Injection

Magic Calendar Lite 1.02 - index.php SQL Injection source: https://www.securityfocus.com/bid/16734/info Magic Calendar Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

CuteNews 1.4.1 - show_news.php Cross-Site Scripting

CuteNews 1.4.1 - shownews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16740/info CuteNews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generate...

DEBIAN-CVE-2006-0733

Cross-site scripting XSS vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as 1 onfocus and 2 onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue is only...

dotProject 2.0 - includessession.php?baseDir Remote File Inclusion

dotProject 2.0 - includessession.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker c...

IBM Lotus Domino 6.x7.0 iNotes - Email Subject Cross-Site Scripting

IBM Lotus Domino 6.x7.0 iNotes - Email Subject Cross-Site Scripting source: https://www.securityfocus.com/bid/16577/info IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities. These vulnerabilities can allow attackers to carry out a variety of attacks, including...

IBM Lotus Domino 6.x/7.0 iNotes - Email Subject Cross-Site Scripting

source: https://www.securityfocus.com/bid/16577/info IBM Lotus Domino iNotes is prone to multiple HTML- and script-injection vulnerabilities. These vulnerabilities can allow attackers to carry out a variety of attacks, including theft of cookie-based authentication credentials. Proof of concept f...

BrowserCRM - Results.PHP Cross-Site Scripting Vulnerability

BrowserCRM 0 Results.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16435/info BrowserCRM is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths. A user can leverage this issue to crash not...

GNOME Evolution 2.2.32.3.x - Inline XML File Attachment Buffer Overflow

GNOME Evolution 2.2.32.3.x - Inline XML File Attachment Buffer Overflow source: https://www.securityfocus.com/bid/16408/info GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. pe...

PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection

PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection source: https://www.securityfocus.com/bid/16377/info ExpressionEngine is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to HTTP 'Referer' header...

PixelPost 1.4.3 - User Comment HTML Injection

source: https://www.securityfocus.com/bid/16362/info Pixelpost is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

SleeperChat 0.3f - index.php Cross-Site Scripting

SleeperChat 0.3f - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16363/info SleeperChat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

Rockliffe MailSite 5.3.4/6.1.22/7.0.3 - HTTP Mail Management Cross-Site Scripting

source: https://www.securityfocus.com/bid/16330/info MailSite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

BlogPHP 1.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of th...