PT-2014-8867

Name of the Vulnerable Software and Affected Versions InstaSqueeze Sexy Squeeze Pages plugin for WordPress affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter to "lp/index.php" A...

CVE-2014-9102: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Kunena component before 3.0.6 for Joomla! allow remote authenticated users to execute arbitrary SQL commands via the index value in an array parameter, as demonstrated by the topics parameter in an unfavorite action to index.php...

PT-2014-8829

Name of the Vulnerable Software and Affected Versions Kunena component versions prior to 3.0.6 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the index value in an array parameter, such as the topics parameter in an...

CVE-2014-7847

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-7847

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-7847: Undefined Security Weakness

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service resource consumption by triggering the calculation of an estimated latitude and longitude for an IP address...

CVE-2014-8539

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

CVE-2014-8539

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

CVE-2014-8539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the modsimpleemailformfield21 parameter to index.php...

PT-2014-8602

Name of the Vulnerable Software and Affected Versions Simple Email Form versions 1.8.5 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the mod simpleemailform field2 1 parameter to "index.php". Recommendations For Simple...

CVE-2014-8996

Multiple cross-site scripting XSS vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 authorname or 2 content parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 authorname or 2 content parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a memberprofile action to index.php...

CVE-2014-9005

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

CVE-2014-9005: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to execute arbitrary SQL commands via the 1 country, 2 gender1, or 3 gender2 parameter in a search action to index.php...

CVE-2014-9001: Improper Control of Generation of Code

reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 APPTMIN, 2 APPTHR, 3 APPTDA, 4 APPTMO, 5 APPTYR, or 6 APPTPHONE parameters...

CVE-2014-8996: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Nibbleblog before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 authorname or 2 content parameter to index.php...

CVE-2014-9004: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a memberprofile action to index.php...

PT-2014-8777

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...

PT-2014-8780

Name of the Vulnerable Software and Affected Versions Incredible PBX version 11 2.0.6.5.0 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the APPTMIN, APPTHR, APPTDA, APPTMO, APPTYR, or APPTPHONE parameters in the reminders/index.p...