Atlassian JIRA 3.7.3 - BrowseProject.JSPA Cross-Site Scripting

source: https://www.securityfocus.com/bid/22503/info Atlassian JIRA is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

Sage 1.3.6 - Extension Feed HTML Injection

source: https://www.securityfocus.com/bid/22493/info Sage Extension Feed is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Hostile HTML and script code may be injected into vulnerabl...

cPanel 11 - PassWDMySQL Cross-Site Scripting

cPanel 11 - PassWDMySQL Cross-Site Scripting source: https://www.securityfocus.com/bid/22474/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

cPanel 11 - PassWDMySQL Cross-Site Scripting

source: https://www.securityfocus.com/bid/22474/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

MySQLNewsEngine - Affichearticles.php3 Remote File Inclusion

MySQLNewsEngine - Affichearticles.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/22431/info MySQLNewsEngine is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromis...

PortailPHP 2 - mod_searchindex.php?chemin Remote File Inclusion

PortailPHP 2 - modsearchindex.php?chemin Remote File Inclusion source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacke...

PortailPHP 2 - '/mod_news/index.php?chemin' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion

source: https://www.securityfocus.com/bid/22381/info PortailPHP is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

Uebimiau 2.7.10 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22375/info Uebimiau is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/22369/info EasyMoblog is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow a...

OpenEMR 2.8.2 - Import_XML.php Remote File Inclusion

OpenEMR 2.8.2 - ImportXML.php Remote File Inclusion source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application...

OpenEMR 2.8.2 - Login_Frame.php Cross-Site Scripting

OpenEMR 2.8.2 - LoginFrame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

MDPro 1.0.76 - index.php SQL Injection

MDPro 1.0.76 - index.php SQL Injection source: https://www.securityfocus.com/bid/22293/info MDPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

MDPro 1.0.76 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/22293/info MDPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modif...

PHP Membership Manager 1.5 - admin.php Cross-Site Scripting

PHP Membership Manager 1.5 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22263/info PHP Membership Manager is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue ...

PHP Membership Manager 1.5 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22263/info PHP Membership Manager is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Apple Mac OSX 10.4.x - Software Update Format String

Apple Mac OSX 10.4.x - Software Update Format String source: https://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the...

212Cafe Board 0.08 Beta 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities

212Cafe Board 0.08 Beta 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22167/info 212cafeBoard is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

212Cafe Guestbook 4.00 - show.php Cross-Site Scripting

212Cafe Guestbook 4.00 - show.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22173/info 212Cafe Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Bitweaver 1.3.1 Articles and Blogs - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22169/info Bitweaver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...