CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection

source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Payment Processor Script (PPScript) - 'shop.htm' SQL Injection

source: https://www.securityfocus.com/bid/42539/info PPScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Payment Processor Script (PPScript) - shop.htm SQL Injection

Payment Processor Script PPScript - shop.htm SQL Injection source: https://www.securityfocus.com/bid/42539/info PPScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Softbiz Dating Script 1.0 - cat_products.php SQL Injection

Softbiz Dating Script 1.0 - catproducts.php SQL Injection source: https://www.securityfocus.com/bid/35896/info Softbiz Dating Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Phorum Multiple BBCode HTML Injection Vulnerabilities

Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials and...

Million Dollar Pixel Ads - Cross-Site Scripting SQL Injection

Million Dollar Pixel Ads - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/43443/info Million Dollar Pixel Ads is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

phpGroupWare Multiple Input Validation Vulnerabilities

phpGroupWare is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to disclose sensitive information, steal cookie-based authentication credentials, compromise the application, access or...

Classified Linktrader Script - addlink.php SQL Injection

Classified Linktrader Script - addlink.php SQL Injection source: https://www.securityfocus.com/bid/43497/info Classified Linktrader Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

CJ Dynamic Poll Pro 2.0 - admin_index.php Cross-Site Scripting

CJ Dynamic Poll Pro 2.0 - adminindex.php Cross-Site Scripting source: www.securityfocus.com/bid/43498/info CJ Dynamic Poll Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Classified Linktrader Script - 'addlink.php' SQL Injection

source: https://www.securityfocus.com/bid/43497/info Classified Linktrader Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

DragDropCart - search.php?search Cross-Site Scripting

DragDropCart - search.php?search Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrar...

DragDropCart - assetsjsddcart.php?sid Cross-Site Scripting

DragDropCart - assetsjsddcart.php?sid Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

DragDropCart - includesajaxgetstate.php?prefix Cross-Site Scripting

DragDropCart - includesajaxgetstate.php?prefix Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

DragDropCart - index.php?search Cross-Site Scripting

DragDropCart - index.php?search Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

DragDropCart - 'login.php?redirect' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

DragDropCart - 'productdetail.php?product' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

MyWeight 1.0 - 'user_login.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43488/info MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

DragDropCart - login.php?redirect Cross-Site Scripting

DragDropCart - login.php?redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

DragDropCart - productdetail.php?product Cross-Site Scripting

DragDropCart - productdetail.php?product Cross-Site Scripting source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

MyWeight 1.0 - user_addfood.php?date Cross-Site Scripting

MyWeight 1.0 - useraddfood.php?date Cross-Site Scripting source: https://www.securityfocus.com/bid/43488/info MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...