Horde IMP Webmail 4.3.7 - 'fetchmailprefs.php' HTML Injection

source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected...

NetArt Media Car Portal 2.0 - 'car' SQL Injection

source: https://www.securityfocus.com/bid/43536/info Car Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

NetArt Media Car Portal 2.0 - car SQL Injection

NetArt Media Car Portal 2.0 - car SQL Injection source: https://www.securityfocus.com/bid/43536/info Car Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML ...

MySITE - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43510/info MySITE is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authenticati...

Joomla! Component com_tax - eid SQL Injection

Joomla! Component comtax - eid SQL Injection source: https://www.securityfocus.com/bid/43461/info The 'comtax' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

OpenText LiveLink 9.7.1 - Multiple Cross-Site Scripting Vulnerabilities

OpenText LiveLink 9.7.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43420/info OpenText LiveLink is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Haudenschilt Family Connections CMS (FCMS) Multiple PHP remote file inclusion vulnerabilities

This host is running Haudenschilt Family Connections CMS FCMS and is prone to multiple remote file inclusion vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfcmsmultrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Haudenschilt Family Connections CMS FCMS Multiple PHP remote file inclusion...

Joomla! Component com_tax - 'eid' SQL Injection

source: https://www.securityfocus.com/bid/43461/info The 'comtax' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

@Mail 6.1.9 - 'MailType' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43377/info @Mail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary JavaScript code in the browser of an unsuspecting user in the context ...

Joomla! Component com_spain - nv SQL Injection

Joomla! Component comspain - nv SQL Injection source: https://www.securityfocus.com/bid/43354/info The Spain component for Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Joomla! Component com_spain - 'nv' SQL Injection

source: https://www.securityfocus.com/bid/43354/info The Spain component for Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Netautor Professional 5.5 - 'login2.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43290/info Netautor Professional is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting...

Mollify 1.6 - index.php Cross-Site Scripting

Mollify 1.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43262/info Mollify is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary JavaScript code in the...

Group-Office 'modules/notes/json.php' SQL Injection Vulnerability

Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent...

ASP Nuke - SQL Injection

ASP Nuke - SQL Injection ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | 0 " & "...

Horde Application Framework 'icon_browser.php' Cross-Site Scripting Vulnerability

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacke...

ZenPhoto 1.3 - zp-corefull-image.php?a SQL Injection

ZenPhoto 1.3 - zp-corefull-image.php?a SQL Injection source: https://www.securityfocus.com/bid/43021/info Zenphoto is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...

ZenPhoto 1.3 - zp-coreadmin.php Multiple Cross-Site Scripting Vulnerabilities

ZenPhoto 1.3 - zp-coreadmin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43021/info Zenphoto is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Horde Application Framework 3.3.8 - icon_browser.php Cross-Site Scripting

Horde Application Framework 3.3.8 - iconbrowser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43001/info Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...