html-edit CMS 3.1.x - html_output Cross-Site Scripting

html-edit CMS 3.1.x - htmloutput Cross-Site Scripting source: https://www.securityfocus.com/bid/47576/info html-edit CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

HTB22953: XSS in Max's PHP Photo Album

Vulnerability ID: HTB22953 Reference: http://www.htbridge.ch/advisory/xssinmaxsphpphotoalbum.html Product: Max's PHP Photo Album Vendor: http://www.phpf1.com http://www.phpf1.com Vulnerable Version: 2008-04-01 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

html-edit CMS 3.1.x - 'html_output' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47576/info html-edit CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting

WordPress Plugin WP Ajax Recent Posts 1.0.1 - do Cross-Site Scripting source: https://www.securityfocus.com/bid/47579/info The WP Ajax Recent Posts WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

Max's PHP Photo Album 2008-04-01 Cross Site Scripting

Vulnerability ID: HTB22953 Reference: http://www.htbridge.ch/advisory/xssinmaxsphpphotoalbum.html Product: Max's PHP Photo Album Vendor: http://www.phpf1.com http://www.phpf1.com Vulnerable Version: 2008-04-01 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

TemaTres 1.3 - _search_expresion Cross-Site Scripting

TemaTres 1.3 - searchexpresion Cross-Site Scripting source: https://www.securityfocus.com/bid/47569/info TemaTres is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Qianbo Enterprise Web Site Management System Cross Site Scripting Vulnerability

This host is running Qianbo Enterprise Web Site Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbqianboenterprisewebsitemanagementsystemxssvuln.nasl 5751 2017-03-28 14:37:16Z cfi $ Qianbo Enterprise Web Site Management System Cross Site...

todoyu 2.0.8 - lang Cross-Site Scripting

todoyu 2.0.8 - lang Cross-Site Scripting source: https://www.securityfocus.com/bid/47540/info todoyu is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

SyCtel Design - 'menu' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/47526/info SyCtel Design is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loc...

Automagick Tube Script 1.4.4 - module Cross-Site Scripting

Automagick Tube Script 1.4.4 - module Cross-Site Scripting source: https://www.securityfocus.com/bid/47519/info Automagick Tube Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Dalbum 1.43 XSRF / XSS / Path Disclosure

=============================== Vulnerability ID: HTB22941 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryindalbum.html Product: Dalbum Vendor: http://www.dalbum.org/ http://www.dalbum.org/ Vulnerable Version: 1.43 Vendor Notification: 05 April 2011 Vulnerability Type: CSRF...

ChatLakTurk PHP Botlu Video - 'ara.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47428/info ChatLakTurk PHP Botlu Video is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

WordPress Plugin WP-StarsRateBox 1.1 - 'j' SQL Injection

source: https://www.securityfocus.com/bid/47423/info The WP-StarsRateBox plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Universal Post Manager WordPress Plugin 1.0.9 XSS / Path Disclosure

============================== Vulnerability ID: HTB22937 Reference: http://www.htbridge.ch/advisory/pathdisclosureinuniversalpostmanagerwordpressplugin.html Product: Universal Post Manager wordpress plugin Vendor: ProfProjects Artyom Chakhoyan http://www.profprojects.com/ Vulnerable Version: 1.0...

Dalbum 1.43 - editini.php Cross-Site Scripting

Dalbum 1.43 - editini.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47427/info Dalbum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections

Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections source: https://www.securityfocus.com/bid/47421/info Ultra Marketing Enterprises CMS and Cart is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using i...

XOOPS 2.5 - imagemanager.php Local File Inclusion

XOOPS 2.5 - imagemanager.php Local File Inclusion source: https://www.securityfocus.com/bid/47418/info XOOPS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view arbitrary local files within th...

Joomla! Component com_phocadownload - Local File Inclusion

Joomla! Component comphocadownload - Local File Inclusion source: https://www.securityfocus.com/bid/47399/info The 'comphocadownload' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

XOOPS 2.5 - 'imagemanager.php' Local File Inclusion

source: https://www.securityfocus.com/bid/47418/info XOOPS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view arbitrary local files within the context of the webserver process. Successfully...

4Images 1.7.9 - Multiple Remote File Inclusions SQL Injections

4Images 1.7.9 - Multiple Remote File Inclusions SQL Injections source: https://www.securityfocus.com/bid/47394/info 4images is prone to multiple remote file-include vulnerabilities and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploi...