WordPress Audio Plugin 0.5.1 - Cross-Site Scripting Vulnerability

This audio plugin's "showfile" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-base...

WordPress Plugin RSS Feed Reader 0.1 - rss_url Cross-Site Scripting

WordPress Plugin RSS Feed Reader 0.1 - rssurl Cross-Site Scripting source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Plugin Audio 0.5.1 - showfile Cross-Site Scripting

WordPress Plugin Audio 0.5.1 - showfile Cross-Site Scripting source: https://www.securityfocus.com/bid/45991/info The Audio plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

WordPress Plugin RSS Feed Reader 0.1 - 'rss_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Audio 0.5.1 - 'showfile' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45991/info The Audio plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

PHPAuctions 'viewfaqs.php' SQLi Vulnerability - Active Check

PHPAuctions is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

PHPAuctions 'viewfaqs.php' SQL Injection Vulnerability

PHPAuctions is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

PHPAuctions - 'viewfaqs.php' SQL Injection

source: https://www.securityfocus.com/bid/45928/info PHPAuctions is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

CompactCMS <= 1.4.1 Multiple XSS Vulnerabilities - Active Check

CompactCMS is prone to multiple cross-site scripting XSS vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

phpCMS 2008 V2 - data.php SQL Injection

phpCMS 2008 V2 - data.php SQL Injection source: https://www.securityfocus.com/bid/45913/info PHPCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2)

CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/45819/info CompactCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied script code may be executed...

CompactCMS 1.4.1 - Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/45819/info CompactCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied script code may be executed in the context of the affected site, potentially allowing the...

Apache Tomcat 'sort' and 'orderBy' Parameters XSS Vulnerabilities (Dec 2010/Jan 2011)

Apache Tomcat is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Ax Developer CMS <= 0.1.1 LFI Vulnerability - Active Check

Ax Developer CMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSite 'db_driver' Parameter Multiple Local File Include Vulnerabilities

openSite is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. Thi...

Joostina 1.3 - index.php Cross-Site Scripting

Joostina 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45732/info Joostina is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Ignition 'comment.php' Local File Include Vulnerability

Ignition is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow...

XSS vulnerability in F3Site

Vulnerability ID: HTB22758 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinf3site2.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: Stored XSS...

SQL Injection in phpMySport

Vulnerability ID: HTB22771 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport1.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

WikLink 0.1.3 - getURL.php SQL Injection

WikLink 0.1.3 - getURL.php SQL Injection source: https://www.securityfocus.com/bid/45673/info WikLink is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...