Surgemail and WebMail 3.0 - 'Page' Remote Format String

source: https://www.securityfocus.com/bid/27990/info SurgeMail and WebMail are prone to a remote format-string vulnerability because the applications fail to properly sanitize user-supplied input before including it in the format-specifier argument of a formatted-printing function. A remote...

SurgeFTP 2.3a2 - 'Content-Length' Null Pointer Denial of Service

source: https://www.securityfocus.com/bid/27993/info SurgeFTP is prone to a remote denial-of-service vulnerability because it fails to perform adequately boundary checks on user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which will crash the server...

Citrix Metaframe Web Manager - login.asp Cross-Site Scripting

Citrix Metaframe Web Manager - login.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/27948/info Citrix MetaFrame Web Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

Plume CMS 1.2.2 - managerxmedia.php Cross-Site Scripting

Plume CMS 1.2.2 - managerxmedia.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27999/info Plume CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary...

IBM Lotus Quickr QuickPlace Server 8.0 - Calendar 'Count' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27925/info IBM Lotus Quickr is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Plume CMS 1.2.2 - '/manager/xmedia.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27999/info Plume CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Jinzora 2.7.5 - slim.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - slim.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

Jinzora 2.7.5 - ajax_request.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - ajaxrequest.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

Jinzora 2.7.5 - popup.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - popup.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Th...

SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection

source: https://www.securityfocus.com/bid/27878/info SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...

RunCMS 1.6.1 - admin.php Cross-Site Scripting

RunCMS 1.6.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27852/info RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in th...

ProjectPier 0.8 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities

ProjectPier 0.8 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27857/info ProjectPier is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker m...

WebcamXP 3.72.4404.05.280 Beta - show_gallery_pic?id Arbitrary Memory Disclosure

WebcamXP 3.72.4404.05.280 Beta - showgallerypic?id Arbitrary Memory Disclosure source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit...

RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27852/info RunCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

BanPro Dms 1.0 - index.php Local File Inclusion

BanPro Dms 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to...

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage...

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities

Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27813/info Sophos Email Appliance is prone to multiple cross-site scripting vulnerabilities that affect its web interface because it fails to properly sanitize...

artmedic webdesign weblog - Multiple Local File Inclusions

artmedic webdesign weblog - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/27797/info artmedic webdesign weblog is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacke...