CS Whois Lookup RCE Vulnerability (Apr 2009) - Active Check

CS Whois Lookup and CS DNS Lookup are prone to a remote command execution RCE vulnerability because the software fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Cross site scripting

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

Magic Photo Storage Website - '/user/delete_category.php?_config[site_path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

PHPSelect Web Development - index.php3 Remote File Inclusion

PHPSelect Web Development - index.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/20231/info PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an...

ToendaCMS 0.7 - index.php Cross-Site Scripting

ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/17501/info SimpleBBS is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary PHP commands in the...

[eVuln] CyBoards PHP Lite SQL Injection Vulnerability

New eVuln Advisory: CyBoards PHP Lite SQL Injection Vulnerability http://evuln.com/vulns/91/summary.html --------------------Summary---------------- eVuln ID: EV0091 CVE: CVE-2006-1134 Software: CyBoards PHP Lite Sowtware's Web Site:...

PHPWebGallery 1.3.41.5.1 - category.php SQL Injection

PHPWebGallery 1.3.41.5.1 - category.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

1-Script 1-Search 1.8 - '1search.CGI' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15712/info 1-Search is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

HelpDeskPoint Free Help Desk Software SQL inj.

HelpDeskPoint Free Help Desk Software SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html Vendor:http://helpdeskpoint.com affected version: 2.38 and prior Product Description: HelpDeskPoint.com Welcom...

Widget Property 1.1.19 - Property.php SQL Injection

Widget Property 1.1.19 - Property.php SQL Injection source: https://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script...

DeluxeBB 1.0 - 'pm.php' SQL Injection

source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a compromise of the application,...

ID Team ID Board 1.1.3 - SQL.CLS.php SQL Injection

ID Team ID Board 1.1.3 - SQL.CLS.php SQL Injection source: https://www.securityfocus.com/bid/14204/info ID Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14154/info AutoIndex PHP Script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

RaXnet Cacti 0.50.6.x0.8.x - Graph_Image.php Remote Command Execution Variant

RaXnet Cacti 0.50.6.x0.8.x - GraphImage.php Remote Command Execution Variant source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that...

UBBCentral UBB.Threads 5.5.16.x - download.php?Number SQL Injection

UBBCentral UBB.Threads 5.5.16.x - download.php?Number SQL Injection source: https://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successf...

UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection

source: https://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection source: https://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' scri...

CartWIZ 1.10 - 'searchresults.asp' Name Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13343/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - 'Access.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13338/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...