UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection

source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit...

IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

GenPortal - buscarCat.php Cross-Site Scripting

GenPortal - buscarCat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

GenPortal - 'buscarCat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

OpenDB 1.0.6 - user_admin.php?user_id Cross-Site Scripting

OpenDB 1.0.6 - useradmin.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thes...

OpenDB 1.0.6 - 'listings.php?title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...

OpenDB 1.0.6 - listings.php?title Cross-Site Scripting

OpenDB 1.0.6 - listings.php?title Cross-Site Scripting source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Linux

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescripti...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Windows

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scripts4Profit DXShopCart 4.30 - pid SQL Injection

Scripts4Profit DXShopCart 4.30 - pid SQL Injection source: https://www.securityfocus.com/bid/30772/info DXShopCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

NewsHOWLER 1.03 - Cookie Data SQL Injection

NewsHOWLER 1.03 - Cookie Data SQL Injection source: https://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

NewsHOWLER 1.03 - Cookie Data SQL Injection

source: https://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

FipsCMS 2.1 - neu.asp SQL Injection

FipsCMS 2.1 - neu.asp SQL Injection source: https://www.securityfocus.com/bid/30712/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PromoProducts - 'view_product.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/30725/info PromoProducts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access...

Links Pile - link.php SQL Injection

Links Pile - link.php SQL Injection source: https://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Meet#Web 0.8 - RegRightsResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegRightsResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacke...

PHP Realty - dpage.php SQL Injection

PHP Realty - dpage.php SQL Injection source: https://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Meet#Web 0.8 - 'RegForm.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...