Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Softbiz Image Gallery - image_desc.php?latest Cross-Site Scripting

Softbiz Image Gallery - imagedesc.php?latest Cross-Site Scripting source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issue...

Softbiz Image Gallery - changepassword.php?msg Cross-Site Scripting

Softbiz Image Gallery - changepassword.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Softbiz Image Gallery - suggest_image.php Multiple Cross-Site Scripting Vulnerabilities

Softbiz Image Gallery - suggestimage.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Softbiz Image Gallery - config.php?msg Cross-Site Scripting

Softbiz Image Gallery - config.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Keld PHP-MySQL News Script 0.7.1 - login.php SQL Injection

Keld PHP-MySQL News Script 0.7.1 - login.php SQL Injection source: https://www.securityfocus.com/bid/30529/info Keld PHP-MySQL News Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

libxslt 1.1.x - RC4 Encryption and Decryption functions Buffer Overflow

source: https://www.securityfocus.com/bid/30467/info The 'libxslt' library is prone to a heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker may exploit this issue to execute arbitrary code with the privileges ...

MiniBB RSS 2.0 Plugin - Multiple Remote File Inclusions

MiniBB RSS 2.0 Plugin - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/30421/info The RSS plugin for miniBB is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attack...

Greatclone GC Auction Platinum - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Greatclone GC Auction Platinum - category.php SQL Injection

Greatclone GC Auction Platinum - category.php SQL Injection source: https://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Willoughby TriO 2.1 - SQL Injection

source: https://www.securityfocus.com/bid/30384/info Willoughby TriO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Willoughby TriO 2.1 - SQL Injection

Willoughby TriO 2.1 - SQL Injection source: https://www.securityfocus.com/bid/30384/info Willoughby TriO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

EZContents - 'minicalendar.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30373/info ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allo...

AtomPhotoBlog 1.15 - 'atomPhotoBlog.php' SQL Injection

source: https://www.securityfocus.com/bid/30360/info AtomPhotoBlog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

EMC Centera Universal Access 4.0_4735.p4 - Username SQL Injection

EMC Centera Universal Access 4.04735.p4 - Username SQL Injection source: https://www.securityfocus.com/bid/30358/info EMC Centera Universal Access CUA is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacke...

Pre Survey Generator - default.asp SQL Injection

Pre Survey Generator - default.asp SQL Injection source: https://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...