PT-2015-5831

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page parameter to "index.php" or the username parameter to "gxadmin/login.php". Recommendations For...

CVE-2015-2678: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter in the categories page to gxadmin/index.php or 2 page parameter to index.php...

CVE-2015-2034

Cross-site scripting XSS vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php...

PT-2015-5558

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.7.4 Description A cross-site scripting XSS issue exists in the administrative backend, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the page parameter to admin.ph...

CVE-2015-2034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php...

CVE-2015-1603

Multiple cross-site scripting XSS vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to index.php or 2 id parameter in a usersusers action to asys/site/system.php...

PT-2015-5383

Name of the Vulnerable Software and Affected Versions Adminsystems CMS versions prior to 4.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter to "index.php" or the id parameter in a "users users" action to...

Cross site scripting

Cross-site scripting XSS vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information...

PT-2015-3633

Name of the Vulnerable Software and Affected Versions April's Super Functions Pack plugin versions prior to 1.4.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the readme.php file. Recommendations For versions...

CVE-2014-100026: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information...

PT-2014-2675

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.2.0 RC1 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter of the install/popup.php file. Recommendations For versions prior to 2.2...

PT-2014-2951

Name of the Vulnerable Software and Affected Versions Yealink VoIP Phone SIP-T38G version affected versions not specified Description A directory traversal issue allows remote authenticated users to read arbitrary files by using a .. dot dot in the page parameter to the "cgi-bin/cgiServer.exx"...

CVE-2014-4532: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/printAdminUsersListFooter.tpl.php in the GarageSale plugin before 1.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter...

PT-2014-5958

Name of the Vulnerable Software and Affected Versions GarageSale plugin versions prior to 1.2.3 for WordPress Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter in t...

Escapade 0.2.1 Beta Scripting Engine PAGE Parameter Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value for the PAGE parameter to the...

PT-2014-4260 · Uaepd · Uaepd Shopping Cart Script

Name of the Vulnerable Software and Affected Versions: UAEPD Shopping Cart Script affected versions not specified Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved by manipulating the cat id or p id...

PT-2013-2046

Name of the Vulnerable Software and Affected Versions Elastix version 2.3.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the Page parameter in the xmlservices/E book.php file...

CVE-2012-6608: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in xmlservices/Ebook.php in Elastix 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the Page parameter...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================...

CVE-2013-6281: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in codebase/spreadsheet.php in the Spreadsheet dhtmlxSpreadsheet plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "page" parameter...