DCP-Portal 3.74.x5.x6.x - index.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 3.74.x5.x6.x - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inpu...

DCP-Portal 3.74.x5.x6.x - mycontents.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 3.74.x5.x6.x - mycontents.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

[KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php

KAPDA::31 - Runcms 1.x CrossSiteScripting vulnerability in bigshow.php KAPDA New advisory Vulnerable products : Runcms 1.x Vendor: www.runcms.org Risk: Low Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi roozbehatyahoodotcom www.kapda.ir www.persiax.com Date :...

DVGuestbook 1.01.2.2 - index.php?page Cross-Site Scripting

DVGuestbook 1.01.2.2 - index.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/16968/info DVGuestbook is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

LogIT 1.31.4 - Remote File Inclusion

LogIT 1.31.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/16932/info LogIT is prone to a remote file-include vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input. Attackers may specify remotely hosted script files to be execut...

vBulletin 3.03.5 - profile.php?Email HTML Injection

vBulletin 3.03.5 - profile.php?Email HTML Injection source: https://www.securityfocus.com/bid/16919/info vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...

PEHEPE Membership Management System 3.0 - 'Sol_menu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

PEHEPE Membership Management System 3.0 - Sol_menu.php Cross-Site Scripting

PEHEPE Membership Management System 3.0 - Solmenu.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16885/info PEHEPE Membership Management System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplie...

D3Jeeb Pro 3 - fastlinks.php?catid SQL Injection

D3Jeeb Pro 3 - fastlinks.php?catid SQL Injection source: https://www.securityfocus.com/bid/16853/info D3Jeeb is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...

SPiD 1.3.1 - 'Scan_Lang_Insert.php' Local File Inclusion

source: https://www.securityfocus.com/bid/16822/info SPiD is prone to a local file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of this issue may facilitate the unauthorized viewing of files and executio...

SPiD 1.3.1 - Scan_Lang_Insert.php Local File Inclusion

SPiD 1.3.1 - ScanLangInsert.php Local File Inclusion source: https://www.securityfocus.com/bid/16822/info SPiD is prone to a local file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of this issue may...

PHPX 3.5.9 - XCode Tag HTML Injection

PHPX 3.5.9 - XCode Tag HTML Injection source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code woul...

PHPX 3.5.9 - XCode Tag HTML Injection

source: https://www.securityfocus.com/bid/16799/info PHPX is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of the...

Dragonfly CMS 9.0.6.1 Stories_Archive Module - Multiple Cross-Site Scripting Vulnerabilities

Dragonfly CMS 9.0.6.1 StoriesArchive Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in...

Dragonfly CMS 9.0.6.1 Surveys Module - Multiple Cross-Site Scripting Vulnerabilities

Dragonfly CMS 9.0.6.1 Surveys Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

Dragonfly CMS 9.0.6 1 Your_Account Module - Multiple Cross-Site Scripting Vulnerabilities

Dragonfly CMS 9.0.6 1 YourAccount Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities

Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

SquirrelMail < 1.4.6 Multiple Vulnerabilities

The installed version of SquirrelMail fails to sanitize user-supplied input to mailbox names before passing them to an IMAP server. An unauthenticated attacker may be able to leverage this issue to launch attacks against the underlying IMAP server or against a user's mailboxes by tricking him int...

Webpagecity WPC easy - SQL Injection

source: https://www.securityfocus.com/bid/16721/info Webpagecity 'WPC.easy' is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...