6488 matches found
PunBB 1.2.x - 'p' Parameter Multiple Cross-Site Scripting Vulnerabilities
PunBB 1.2.x 'p' Parameter Multiple Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/31082/info PunBB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
vBulletin 3.6.103.7.2 - $newpm[title] Cross-Site Scripting
vBulletin 3.6.103.7.2 - $newpmtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Ovidentia 6.6.5 - index.php Cross-Site Scripting
Ovidentia 6.6.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30735/info Ovidentia is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code...
AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30730/info AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
AWStats 6.8 - AWStats.pl Cross-Site Scripting
AWStats 6.8 - AWStats.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/30730/info AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...
Ipswitch WS_FTP Home/Professional 8.0 - WS_FTP Client Format String
source: https://www.securityfocus.com/bid/30720/info Ipswitch WSFTP client is prone to a format-string vulnerability it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may exploit this issue to execute arbitrar...
mUnky 0.01 - index.php Remote Code Execution
mUnky 0.01 - index.php Remote Code Execution source: https://www.securityfocus.com/bid/30705/info mUnky is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows attackers to cause the application to...
Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting
Mambo Open Source 4.6.2 - mambotseditorsmostlyce PHPconnector.php?Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfig_sitename Cross-Site Scripting
Mambo Open Source 4.6.2 - administratorpopupsindex3pop.php?mosConfigsitename Cross-Site Scripting source: https://www.securityfocus.com/bid/30708/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...
YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/30686/info YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context ...
Datafeed Studio - patch.php Remote File Inclusion
Datafeed Studio - patch.php Remote File Inclusion source: https://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
Datafeed Studio 1.6.2 - search.php Cross-Site Scripting
Datafeed Studio 1.6.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30660/info Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrar...
IDevSpot PHPLinkExchange 1.011.02 - index.php Multiple Cross-Site Scripting Vulnerabilities
IDevSpot PHPLinkExchange 1.011.02 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30665/info PhPLinkExchange is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacke...
IDevSpot PHPLinkExchange 1.01/1.02 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/30665/info PhPLinkExchange is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting
Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30635/info GooCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitra...
RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities
RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30616/info RMSOFT MiniShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...
Yogurt Social Network 3.2 rc1 Module for XOOPS - index.php?uid Cross-Site Scripting
Yogurt Social Network 3.2 rc1 Module for XOOPS - index.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Yogurt Social Network 3.2 rc1 Module for XOOPS - album.php?uid Cross-Site Scripting
Yogurt Social Network 3.2 rc1 Module for XOOPS - album.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/30618/info Yogurt Social Network is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
RMSOFT Downloads Plus - (rmdp) 1.51.7 Module for XOOPS search.php?key Cross-Site Scripting
RMSOFT Downloads Plus - rmdp 1.51.7 Module for XOOPS search.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...