MyWeight 1.0 - user_login.php Multiple Cross-Site Scripting Vulnerabilities

MyWeight 1.0 - userlogin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43488/info MyWeight is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

DragDropCart - '/includes/ajax/getstate.php?prefix' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

DragDropCart - 'search.php?search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

DragDropCart - '/assets/js/ddcart.php?sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43478/info DragDropCart is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

Eggdrop Server Module is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected...

Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43692/info Rentventory is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentiall...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 1 source: https://www.securityfocus.com/bid/35893/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/35893/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35871/info The Site Builder module for Miniweb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of...

Censura < 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35920/info Censura is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities

Miniweb 2.0 Site Builder Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35871/info The Site Builder module for Miniweb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...

Censura 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities

Censura 2.1.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35920/info Censura is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Joomla! Component Permis 1.0 (com_groups) - 'id' SQL Injection

source: https://www.securityfocus.com/bid/35849/info The Permis 'comgroups' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

AIOCP 1.4 - 'cp_html2txt.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/35811/info AIOCP All In One Control Panel is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer; other attac...

AlmondSoft Multiple Classifieds Products - 'index.php?replid' SQL Injection

source: https://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35809/info XZeroScripts XZero Community Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

Pilot Group eTraining - 'lessons_login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Pilot Group eTraining - 'news_read.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Pilot Group eTraining - courses_login.php Cross-Site Scripting

Pilot Group eTraining - courseslogin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...