phpList 2.10.18 - index.php SQL Injection

phpList 2.10.18 - index.php SQL Injection source: https://www.securityfocus.com/bid/54912/info PHPList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

phpList 2.10.18 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/54912/info PHPList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

phpList 2.10.18 - 'unconfirmed' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54887/info PHPList is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

ntop 'arbfile' Parameter XSS Vulnerability

ntop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

WP Effective Lead Management v3.0.0 Persistent XSS

Exploit for php platform in category web applications Exploit Title: WP Lead Management v3.0.0 Persistent XSS Date: 8/5/12 Exploit Author: Chris Kellum Software Link: http://downloads.wordpress.org/plugin/wp-effective-lead-management.3.0.1.zip Version: 3.0.0 ===================== Vulnerability...

PolarisCMS - 'WebForm_OnSubmit()' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54817/info PolarisCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

WordPress Plugin Effective Lead Management 3.0.0 - Persistent Cross-Site Scripting

Exploit Title: WP Lead Management v3.0.0 Persistent XSS Date: 8/5/12 Exploit Author: Chris Kellum Software Link: http://downloads.wordpress.org/plugin/wp-effective-lead-management.3.0.1.zip Version: 3.0.0 ===================== Vulnerability Details ===================== The form does not properly...

Wiki Web Help - configpath Remote File Inclusion

Wiki Web Help - configpath Remote File Inclusion source: https://www.securityfocus.com/bid/55387/info Wiki Web Help is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the...

ntop - arbfile Cross-Site Scripting

ntop - arbfile Cross-Site Scripting source: https://www.securityfocus.com/bid/54792/info ntop is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Mahara 1.4.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Mahara 1.4.1 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54776/info Mahara is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied text. Successfu...

Mahara 1.4.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54776/info Mahara is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied text. Successful exploits will allow attacker-supplied HTML and script code to run in the...

Limny - index.php Multiple SQL Injections

Limny - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54753/info Limny is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...

WordPress Plugin chenpress - Arbitrary File Upload

source: https://www.securityfocus.com/bid/54635/info The chenpress plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to...

WordPress Plugin chenpress - Arbitrary File Upload

WordPress Plugin chenpress - Arbitrary File Upload source: https://www.securityfocus.com/bid/54635/info The chenpress plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied...

Joomla! Component com_hello - Controller Local File Inclusion

Joomla! Component comhello - Controller Local File Inclusion source: https://www.securityfocus.com/bid/54611/info The 'comhello' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabili...

web@all - name Cross-Site Scripting

web@all - name Cross-Site Scripting source: https://www.securityfocus.com/bid/54466/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Post Recommendations - 'abspath' Remote File Inclusion

source: https://www.securityfocus.com/bid/54459/info The Post Recommendations plug-in for WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the application and the...

Kajona - 'getAllPassedParams()' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54391/info Kajona is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Flogr - 'tag' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54354/info Flogr is prone to multiple unspecified cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

WordPress Plugin church_admin - id Cross-Site Scripting

WordPress Plugin churchadmin - id Cross-Site Scripting source: https://www.securityfocus.com/bid/54329/info The churchadmin plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...