FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data. The...

PD9 Software MegaBBS 2.02.1 - view-profile.asp Multiple SQL Injections

PD9 Software MegaBBS 2.02.1 - view-profile.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP...

BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities

BBS E-Market Professional bf130 1.3.0 - Multiple File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data....

PHP 4.x5.0.1 - PHP_Variables Remote Memory Disclosure

PHP 4.x5.0.1 - PHPVariables Remote Memory Disclosure source: https://www.securityfocus.com/bid/11334/info A vulnerability is reported to present itself in the array parsing functions of the 'phpvariables.c' PHP source file. The vulnerability occurs when a PHP script is being used to print URI...

Simple Machines Forum %lt; 1.1.4 / 1.0.12 SQL Injection

Binary data 4574.prm...

EasyWeb 1.0 FileManager Module - Directory Traversal

EasyWeb 1.0 FileManager Module - Directory Traversal source: https://www.securityfocus.com/bid/10792/info EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a reque...

Gattaca Server 2003 - Cross-Site Scripting

Gattaca Server 2003 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issu...

Jaws 0.20.3 - action Cross-Site Scripting

Jaws 0.20.3 - action Cross-Site Scripting source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a...

Linux Broadcom 5820 Cryptonet Driver Integer Overflow

Linux Broadcom 5820 Cryptonet Driver Integer Overflow ----------------------------------------------------- Overview: There exists an integer overflow in the cryptonet driver. A user supplied value is used to size a dynamic buffer, and this buffer is subsequently filled with user supplied data...

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities

Asterisk PBX 0.7.x - Multiple Logging Format String Vulnerabilities source: https://www.securityfocus.com/bid/10569/info It is reported that Asterisk is susceptible to format string vulnerabilities in its logging functions. An attacker may use these vulnerabilities to corrupt memory, and read or...

phpHeaven phpMyChat 0.14.5 - 'edituser.php3?do_not_login' Authentication Bypass

source: https://www.securityfocus.com/bid/10556/info phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The following specific issues can affect the application: phpMyChat is prone to a HTML...

PHP-Nuke 6.x7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities

PHP-Nuke 6.x7.x Reviews Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the...

PHP-Nuke 6.x/7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...

Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities

Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various...

SquirrelMail 1.2.x - From Email Header HTML Injection

source: https://www.securityfocus.com/bid/10450/info SquirrelMail is reported to be prone to a 'from' field email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to...

Liferay Enterprise Portal 1.x/2.x/5.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10402/info It has been reported that Liferay Enterprise Portal is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. User-supplied data from many input fields is included in server generated content without appropriate...

Sun Solaris 2.67.089 - vfs_getvfssw function Privilege Escalation

Sun Solaris 2.67.089 - vfsgetvfssw function Privilege Escalation source: https://www.securityfocus.com/bid/9962/info It has been reported that Sun Solaris may be prone to a local privilege escalation vulnerability that may allow an attacker to gain root access to a vulnerable system. The issue...

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient sanitization of user-supplied data via the 'img', 'cat',...

Centrinity FirstClass HTTP Server 5/7 - 'TargetName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9950/info It has been reported that FirstClass HTTP Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser. The issue presents itself due to insufficient...

GNU MyProxy 20030629 - Cross-Site Scripting

GNU MyProxy 20030629 - Cross-Site Scripting source: https://www.securityfocus.com/bid/9846/info It has been reported that GNU MyProxy may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself...