Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43001/info Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

BlueCMS 1.6 - 'x-forwarded-for' Header SQL Injection

source: https://www.securityfocus.com/bid/42999/info BlueCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

OneCMS <= 2.6.1 XSS Vulnerability

OneCMS is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

CMS WebManager-Pro - 'c.php' SQL Injection

source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

OneCMS 2.6.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

OneCMS 2.6.1 - index.php Cross-Site Scripting

OneCMS 2.6.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

ccTiddly <= 1.7.6 Multiple RFI Vulnerabilities

ccTiddly is prone to multiple remote file include RFI vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ccTiddly 'cct_base' Parameter Multiple Remote File Include Vulnerabilities

ccTiddly is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible. ccTiddly 1.7.6 is vulnerable; oth...

CompuCMS - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42773/info CompuCMS is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

CompuCMS - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

CompuCMS - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42773/info CompuCMS is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Crystal Player 1.98 - .mls Buffer Overflow

Crystal Player 1.98 - .mls Buffer Overflow source: https://www.securityfocus.com/bid/42727/info Crystal Player is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the...

Joomla! Component com_fireboard - Itemid SQL Injection

Joomla! Component comfireboard - Itemid SQL Injection source: https://www.securityfocus.com/bid/42460/info The 'comfireboard' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Rock Band CMS 0.10 - 'news.php' Multiple SQL Injections (2)

source: https://www.securityfocus.com/bid/42424/info Rock Band CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

SyntaxCMS - rows_per_page SQL Injection

SyntaxCMS - rowsperpage SQL Injection source: https://www.securityfocus.com/bid/42436/info SyntaxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Microsoft Windows MSDTC Denial of Service (CVE-2006-1184)

The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...

Allinta CMS 22.07.2010 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

Allinta CMS 22.07.2010 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42320/info Allinta CMS is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...