epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51149/info epesi BIM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Cyberoam UTM 10 - tableid SQL Injection

Cyberoam UTM 10 - tableid SQL Injection source: https://www.securityfocus.com/bid/51143/info Cyberoam UTM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PHPShop CMS 3.4 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/51130/info PHPShop CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker ...

PHP Booking Calendar 10e - page_info_message Cross-Site Scripting

PHP Booking Calendar 10e - pageinfomessage Cross-Site Scripting source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51045/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities

Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51045/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

Nagios XI - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: www.securityfocus.com/bid/51069/info Nagios XI is prone to an HTML injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the conte...

WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Pretty Link Plugin 'pretty-bar.php' Cross Site Scripting Vulnerability

The Pretty Link plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

Simple Machines Forum (SMF) 1.1.15 - fckeditor Arbitrary File Upload

Simple Machines Forum SMF 1.1.15 - fckeditor Arbitrary File Upload source: https://www.securityfocus.com/bid/50925/info Simple Machines Forum is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload...

Elxis CMS 2009 - 'administrator/index.php' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/50910/info Elxis CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script co...

AtMail 1.04 - 'func' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50877/info AtMail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

AtMail 1.04 - func Multiple Cross-Site Scripting Vulnerabilities

AtMail 1.04 - func Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50877/info AtMail is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50860/info 1-jquery-photo-gallery-slideshow-flash plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

WordPress Plugin flash-album-gallery - facebook.php Cross-Site Scripting

WordPress Plugin flash-album-gallery - facebook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

Manx Multiple Cross Site Scripting and Directory Traversal Vulnerabilities

Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

WordPress Plugin Skysa App Bar - idnews Cross-Site Scripting

WordPress Plugin Skysa App Bar - idnews Cross-Site Scripting source: https://www.securityfocus.com/bid/50824/info Skysa App Bar Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Manx 1.0.1 - '/admin/admin_pages.php?Filename' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/50839/info Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser...

WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50824/info Skysa App Bar Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...