Maian Survey - '/index.php' URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info Maian Survey is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary local files within...

Maian Survey - index.php URI redirection Local File Inclusion

Maian Survey - index.php URI redirection Local File Inclusion source: https://www.securityfocus.com/bid/54613/info Maian Survey is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit...

WordPress Paid Memberships Pro Plugin 'memberslist-csv.php' Information Disclosure Vulnerability

The Paid Memberships Pro plugin for WordPress is prone to an information- disclosure vulnerability because it fails to sufficiently validate user- supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

web@all - name Cross-Site Scripting

web@all - name Cross-Site Scripting source: https://www.securityfocus.com/bid/54466/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

web@all - 'name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54466/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHP MBB - Cross-Site Scripting SQL Injection

PHP MBB - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/54271/info php MBB is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Joomla! Component com_szallasok - id SQL Injection

Joomla! Component comszallasok - id SQL Injection source: https://www.securityfocus.com/bid/54140/info The 'comszallasok' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful...

Coppermine Photo Gallery - index.php Script SQL Injection

Coppermine Photo Gallery - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54115/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may...

Coppermine Photo Gallery - 'index.php' Script SQL Injection

source: https://www.securityfocus.com/bid/54115/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

VANA CMS - 'index.php' Script SQL Injection

source: https://www.securityfocus.com/bid/54066/info VANA CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, o...

Joomla! Component JCal Pro Calendar - SQL Injection

source: https://www.securityfocus.com/bid/54042/info The JCal Pro Calendar component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component JCal Pro Calendar - SQL Injection

Joomla! Component JCal Pro Calendar - SQL Injection source: https://www.securityfocus.com/bid/54042/info The JCal Pro Calendar component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

ADICO - index.php Script SQL Injection

ADICO - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54023/info ADICO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Joomla! Component com_alphacontent - 'limitstart' SQL Injection

source: https://www.securityfocus.com/bid/53942/info The Alphacontent component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists due to insufficiently filtered user-supplied data used in a call to exec in multiple...

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure

WordPress Plugin Email NewsLetter 8.0 - option Information Disclosure source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can...

WordPress Plugin Email NewsLetter 8.0 - 'option' Information Disclosure

source: https://www.securityfocus.com/bid/53850/info The Email Newsletter plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attackers can exploit this issue to obtain sensitive information that may aid in...

Ignite Solutions CMS - car-details.php SQL Injection

Ignite Solutions CMS - car-details.php SQL Injection source: https://www.securityfocus.com/bid/53771/info Ignite Solutions CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Ignite Solutions CMS - 'car-details.php' SQL Injection

source: https://www.securityfocus.com/bid/53771/info Ignite Solutions CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

phpCollab 2.5 - Database Backup Information Disclosure

phpCollab 2.5 - Database Backup Information Disclosure source: https://www.securityfocus.com/bid/53656/info phpCollab is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download backup files that...