PT-2011-4979

Name of the Vulnerable Software and Affected Versions Prestashop versions prior to 1.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various parameters to different API...

Cross-site Scripting (XSS) Vulnerabilities in HESK

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in HESK which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in HESK 1.1 The vulnerability exists due to input sanitation error in the "hesksettingstmptitle" a...

CVE-2009-2392

The vulnerability CVE-2009-2392 affects Virtuenetz Virtue Online Test Generator, specifically the text.php component. It allows SQL injection via the tid parameter, enabling remote attackers to execute arbitrary SQL commands. This is a client/server-side issue in the application’s handling of inp...

CVE-2009-2391: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter...

CVE-2009-2392: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution

!/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultimate PHP Board chat/login.php does not sanatize the...

CVE-2005-4365: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter in text.php and 2 frame parameter in forum.php...