[OVSA20110118] OpenVAS Manager Vulnerable To Command Injection

Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalation within the OpenVAS Manager but more complex injectio...

web@all 1.1 - url Cross-Site Scripting

web@all 1.1 - url Cross-Site Scripting source: https://www.securityfocus.com/bid/45976/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of...

web@all 'url' Parameter Cross Site Scripting Vulnerability

web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...

web@all <= 1.1 XSS Vulnerability - Active Check

web@all is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

web@all 1.1 - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45976/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PivotX 2.2.2 - 'module_image.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45983/info PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PivotX 2.2.2 - module_image.php Cross-Site Scripting

PivotX 2.2.2 - moduleimage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45983/info PivotX is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

WordPress Plugin WP Publication Archive 2.0.1 - file Information Disclosure

WordPress Plugin WP Publication Archive 2.0.1 - file Information Disclosure source: https://www.securityfocus.com/bid/46000/info The WP Publication Archive Plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An...

Advanced Webhost Billing System (AWBS) 2.9.2 - oid SQL Injection

Advanced Webhost Billing System AWBS 2.9.2 - oid SQL Injection source: https://www.securityfocus.com/bid/45827/info Advanced Webhost Billing System AWBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an...

TinyBB 'Profile' SQL Injection Vulnerability

TinyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

TinyBB 'Profile' SQL Injection Vulnerability

TinyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

SA-CONTRIB-2011-002 - Panels - Cross Site Scripting (XSS)

The Panels module allows a site administrator to create customized layouts for multiple uses. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full administrative access...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within nnmRptConfig.exe CGI which is exposed by the webserver which listens by defaul...

PHP MicroCMS 1.0.1 - page_text Cross-Site Scripting

PHP MicroCMS 1.0.1 - pagetext Cross-Site Scripting source: https://www.securityfocus.com/bid/45702/info PHP MicroCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code ...

PHP MicroCMS 1.0.1 - 'page_text' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45702/info PHP MicroCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Microsoft Windows 'CreateSizedDIBSECTION()' Thumbnail View Stack Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability in the Windows Graphics Rendering Engine because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user to open a...

MyBB 1.6 - 'private.php?keywords' SQL Injection

source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

Social Share - search Cross-Site Scripting

Social Share - search Cross-Site Scripting source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Social Share - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Joomla! Component Classified - SQL Injection

source: https://www.securityfocus.com/bid/45545/info The Classified component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...