PHP-Nuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10595/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting, HTML injection, and SQL injection attacks. Although unconfirmed,...

dlink614.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TITLE: Security flaw in DLINK 614+ - SOHO routers http://www.dlink.com TYPE: Script injection over DHCP QUOTE from DLINK: The AirPlus DI-614+ combines the latest advancements in 802.11b silicon chip design from Texas Instruments, utilizing their...

Web Wiz Forums 7.x - Registration_Rules.asp Cross-Site Scripting

Web Wiz Forums 7.x - RegistrationRules.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/10555/info A vulnerability exists in the Web Wiz Forums software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizi...

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry...

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Error Message Full Path Disclosure

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Error Message Full Path Disclosure source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to car...

Liferay Enterprise Portal 1.x2.x5.0.2 - Multiple Cross-Site Scripting Vulnerabilities

Liferay Enterprise Portal 1.x2.x5.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10402/info It has been reported that Liferay Enterprise Portal is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. User-supplied data fro...

FloosieTek FTGate Mail Server 1.2 - 'index.fts?folder' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These issues are due to a failure of the application to properly sanitize user...

OpenBB 1.0.6 - myhome.php SQL Injection

OpenBB 1.0.6 - myhome.php SQL Injection source: https://www.securityfocus.com/bid/10044/info It has been reported that OpenBB is prone to a vulnerability that may allow malicious users to influence SQL queries of the affected application. This issue is due to a failure of the application to...

OpenBB 1.0.6 - 'myhome.php' SQL Injection

source: https://www.securityfocus.com/bid/10044/info It has been reported that OpenBB is prone to a vulnerability that may allow malicious users to influence SQL queries of the affected application. This issue is due to a failure of the application to properly sanitize user-supplied URI data. Thi...

PhotoPost < 4.6 - Multiple Vulnerabilities

PhotoPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc Product: PhotoPost Version: = 4.6 Website: http://www.photopost.com/ BID: 9994 CVE: CVE-2004-1870 CVE-2004-1871 OSVDB: 10261 10262 10263 10264 10265 10266 10267 4771 SECUNIA: 11241 Description: PhotoPost was designed to help you give...

HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal

HP Web Jetadmin 7.5.2456 - setinfo.hts Script Directory Traversal source: https://www.securityfocus.com/bid/9972/info It has been reported that HP Web JetAdmin may be prone to a directory traversal vulnerability allowing remote attackers to access information outside the server root directory. Th...

Centrinity FirstClass HTTP Server 57 - TargetName Cross-Site Scripting

Centrinity FirstClass HTTP Server 57 - TargetName Cross-Site Scripting source: https://www.securityfocus.com/bid/9950/info It has been reported that FirstClass HTTP Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script cod...

phpBB 2.0.7a - Multiple Vulnerabilities

phpBB 2.0.7a - Multiple Vulnerabilities phpBB Multiple Vulnerabilities Vendor: phpBB Group Product: phpBB Version: = 2.0.7a Website: http://www.phpbb.com BID: 9942 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a...

PHP-Nuke 7.1 Recommend_Us Module - fname Cross-Site Scripting

PHP-Nuke 7.1 RecommendUs Module - fname Cross-Site Scripting source: https://www.securityfocus.com/bid/9879/info It has been reported that PHP-Nuke may be prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data via...

cPanel 56789 - dir Cross-Site Scripting

cPanel 56789 - dir Cross-Site Scripting source: https://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to...

xboing buffer overflow

No description provided...

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of...

XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections

XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remo...

BosDev BosDates 3.x - SQL Injection

BosDev BosDates 3.x - SQL Injection source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify...