TFTgallery 'thumbnailformpost.inc.php' Local File Include Vulnerability

TFTgallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...

TFTgallery <= 0.13.1 'thumbnailformpost.inc.php' LFI Vulnerability - Active Check

TFTgallery is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22644 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog2.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

phpLiterAdmin v1.0 RC1 Authentication Bypass Vulnerability

Exploit for php platform in category web applications ========================================================== phpLiterAdmin v1.0 RC1 Authentication Bypass Vulnerability ========================================================== Product: phpLiterAdmin Vendor: phpLiterAdmin...

BlogBird Platform - Multiple Cross-Site Scripting Vulnerabilities

BlogBird Platform - Multiple Cross-Site Scripting Vulnerabilities Vulnerability ID: HTB22647 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogbird1.html Product: BlogBird Vendor: BlogBird http://www.blogbird.nl/ Vulnerable Version: Current actual version on http://www.blogbird.nl/...

Joomla com_wisroyq Persistent XSS Vulnerability

Exploit for php platform in category web applications =============================================== Joomla comwisroyq Persistent XSS Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Joomla com_jbjobs Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== Joomla comjbjobs Persistent XSS Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...

Artica mailattach Parameter Directory Traversal

The installed version of Artica fails to sanitize user-supplied input to the 'mailattach' parameter of the 'images.listener.php' scrip. By prefixing directory traversal strings such as '../' to the 'mailattach' parameter a remote, unauthenticated attacker could exploit this vulnerability to read...

Simple Directory Listing 2.1 - SDL2.php Cross-Site Scripting

Simple Directory Listing 2.1 - SDL2.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42359/info Simple Directory Listing is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Simple Directory Listing 2.1 - 'SDL2.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42359/info Simple Directory Listing is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

pecio CMS 2.0.5 - 'target' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44304/info pecio cms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

sNews 1.7 Cross Site Scripting

=============================== Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability Type:...

Tribiq CMS 5.2.5 Path Disclosure

Vulnerability ID: HTB22640 Reference: http://www.htbridge.ch/advisory/pathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribiq http://tribiq.com/ Vulnerable Version: 5.2.5 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability Type: Path disclosure Status: Fixed b...

Super Simple Blog Script entry Parameter SQL Injection

The remote Super Simple Blog Script install hosted on the remote web server is affected by a SQL injection vulnerability because its 'comments.php' script does not properly sanitize input to the 'entry' parameter before using it a database query. Regardless of PHP's 'magicquotesgpc' setting, an...

sNews 1.7 - 'snews.php' Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/44255/info sNews is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

TWiki 5.0 - binview?rev Cross-Site Scripting

TWiki 5.0 - binview?rev Cross-Site Scripting source: https://www.securityfocus.com/bid/44103/info TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in...

TWiki 5.0 - bin/login Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44103/info TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Joomla! Component Jstore - Controller Local File Inclusion

Joomla! Component Jstore - Controller Local File Inclusion source: https://www.securityfocus.com/bid/44053/info The 'comjstore' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabilit...

Collabtive Cross Site Scripting and HTML Injection Vulnerabilities

Collabtive is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the...

AdaptCMS 'init.php' Remote File Include Vulnerability

AdaptCMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow th...