PT-2014-8783

Name of the Vulnerable Software and Affected Versions vldPersonals versions prior to 2.7.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "member profile" action to "index.php". Recommendations For versions prior t...

PT-2014-8784

Name of the Vulnerable Software and Affected Versions vldPersonals versions prior to 2.7.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the country, gender1, or gender2 parameter in a search action to "index.php". Recommendations For...

PT-2014-8775

Name of the Vulnerable Software and Affected Versions Nibbleblog versions prior to 4.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the author name or content parameter to "index.php". Recommendations For versions prior to 4.0.2,...

PT-2014-8777

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...

Cross site scripting

Cross-site scripting XSS vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php...

CVE-2014-8629

CVE-2014-8629 affects Pandora FMS up to version 5.1 SP1, specifically the Page visualization agents. The vulnerability is an XSS flaw in the index.php endpoint where the refr parameter is returned to users without proper validation, enabling remote attackers to inject arbitrary web script or HTML...

CVE-2014-8629

Cross-site scripting XSS vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php...

PT-2014-8654

Name of the Vulnerable Software and Affected Versions Pandora FMS versions 5.1 SP1 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the refr parameter to "index.php". Recommendations For versions 5.1 SP1 and...

CVE-2014-8629: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Page visualization agents in Pandora FMS 5.1 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via the refr parameter to index.php...

CVE-2014-8954

CVE-2014-8954 affects phpSound up to version 1.0.5. The issue is multiple XSS vulnerabilities exploitable via (1) the Title field, (2) the Description field in playlists, or (3) the filter parameter in an explore action to index.php, enabling remote script/HTML injection. The OpenVAS entry corrob...

CVE-2012-1669: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpMoneyBooks before 1.0.3 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2012-6665: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, a different vulnerability than CVE-2012-1669. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

CVE-2014-8954: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Description fields in a playlist or the 3 filter parameter in an explore action to index.php...

PT-2014-2425

Name of the Vulnerable Software and Affected Versions phpMoneyBooks version 1.0.4 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. dot dot in the file parameter of the index.php file. Recommendations For phpMoneyBooks version 1.0....

PT-2014-2235

Name of the Vulnerable Software and Affected Versions phpMoneyBooks versions prior to 1.0.3 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter of the index.php file. This is a directory traversal vulnerability...

PT-2014-8757

Name of the Vulnerable Software and Affected Versions phpSound version 1.0.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific fields, including the Title or Descriptio...

CVE-2014-2268: Undefined Security Weakness

views/Index.php in the Install module in vTiger 6.0 before Security Patch 2 does not properly restrict access, which allows remote attackers to re-install the application via a request that sets the X-Requested-With HTTP header, as demonstrated by executing arbitrary PHP code via the dbname...

PT-2014-4595

Name of the Vulnerable Software and Affected Versions vTiger versions 6.0 before Security Patch 2 Description The issue is related to improper access restriction in the views/Index.php file within the Install module. This allows remote attackers to re-install the application by setting the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or HTML via the 1 idcustom parameter in an amanmenu request or 2 idgame parameter in an alms/games/edit request to appCore/index.php...

CVE-2014-5257: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or HTML via the 1 idcustom parameter in an amanmenu request or 2 idgame parameter in an alms/games/edit request to appCore/index.php...