Jetty Web Server - Directory Traversal

source: https://www.securityfocus.com/bid/50723/info Jetty Web Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary files within the context of the webserver. Informatio...

webERP 4.3.8 - reportwriterReportMaker.php?reportid SQL Injection

webERP 4.3.8 - reportwriterReportMaker.php?reportid SQL Injection source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting

ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 - Cross-Site Scripting source: https://www.securityfocus.com/bid/50717/info ZOHO ManageEngine ADSelfService Plus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

webERP 4.3.8 - '/reportwriter/ReportMaker.php?reportid' SQL Injection

source: https://www.securityfocus.com/bid/50713/info webERP is prone to information-disclosure, SQL-injection, and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the information-disclosure issue to gain access to sensiti...

WordPress Plugin Flexible Custom Post Type - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50719/info Flexible Custom Post Type plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

SonicWALL Aventail SSL-VPN - SQL Injection

SonicWALL Aventail SSL-VPN - SQL Injection ================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar...

SonicWALL Aventail SSL-VPN - SQL Injection

================================================================================ SonicWALL Aventail SSL-VPN SQL Injection Vulnerability ================================================================================ Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda...

Webistry 1.6 - pid SQL Injection

Webistry 1.6 - pid SQL Injection source: https://www.securityfocus.com/bid/50689/info Webistry is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromis...

Webistry 1.6 - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/50689/info Webistry is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modi...

Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! Component comalfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50637/info Joomla! 'comalfcontact' extension is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

Joomla! Component com_alfcontact 1.9.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50637/info Joomla! 'comalfcontact' extension is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could leverage these issues to execute arbitrary script code in the browser of an...

AShop - Open Redirection Cross-Site Scripting

AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

IBM HTTP Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

SmartJobBoard - keywords Cross-Site Scripting

SmartJobBoard - keywords Cross-Site Scripting source: https://www.securityfocus.com/bid/50552/info SmartJobBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal

source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver...

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

DreamBox DM800 - 'file' Local File Disclosure

source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on...

Joomla! Barter Sites 'com_listing' Component 'category_id' Parameter SQL Injection Vulnerability

This host is running Joomla! Barter Sites component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlabartersitescategoryidparamsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Barter Sites 'comlisting' Component 'categoryid' Parameter SQL Injection...