phpMyChat 0.14.5 - chatusers_popupL.php3 Multiple Cross-Site Scripting Vulnerabilities

phpMyChat 0.14.5 - chatuserspopupL.php3 Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26698/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

phpMyChat 0.14.5 - '/chat/users_popupL.php3' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26698/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

QEMU 0.9 - Translation Block Local Denial of Service

QEMU 0.9 - Translation Block Local Denial of Service source: https://www.securityfocus.com/bid/26666/info QEMU is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks when handling user-supplied input. Attackers can exploit this issue to cause...

F5 Networks FirePass 4100 SSL VPN - My.Logon.php3 Cross-Site Scripting

F5 Networks FirePass 4100 SSL VPN - My.Logon.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/26659/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may...

Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting

source: https://www.securityfocus.com/bid/26606/info Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

SafeNet Sentinel Protection Server 7.xKeys Server 1.0.3 - Directory Traversal

SafeNet Sentinel Protection Server 7.xKeys Server 1.0.3 - Directory Traversal source: https://www.securityfocus.com/bid/26583/info Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data...

Tilde 4.0 - 'Aarstal' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26592/info Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SafeNet Sentinel Protection Server 7.x/Keys Server 1.0.3 - Directory Traversal

source: https://www.securityfocus.com/bid/26583/info Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that cou...

Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

GWExtranet - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/26525/info GWExtranet is prone to multiple directory-traversal vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of t...

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service source: https://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this...

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service

source: https://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to crash the application, resulting in denial-of-service conditions. LIVE555...

Liferay Portal 4.1 Login Script - Cross-Site Scripting

Liferay Portal 4.1 Login Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/26470/info Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Liferay Portal 4.1 Login Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/26470/info Liferay Portal is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow...

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability. CVE-2007-6090. Webapps exploit for php platform source: http://www.securityfocus.com/bid/26458/info Nuked-Klan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize...

Aruba MC-800 Mobility Controller - Screens Directory HTML Injection

source: https://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the...

ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/26467/info ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit these issues to cause denial...

PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities

PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26428/info PHP is prone to multiple denial-of-service vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues ...

VTLS Web Gateway 48.1 - Searchtype Cross-Site Scripting

VTLS Web Gateway 48.1 - Searchtype Cross-Site Scripting source: https://www.securityfocus.com/bid/26419/info Web Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...