Caucho Resin - 'index.php?logout' Cross-Site Scripting

source: https://www.securityfocus.com/bid/60426/info Resin Professional is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

MongoDB - conn Mongo Object Remote Code Execution

MongoDB - conn Mongo Object Remote Code Execution source: https://www.securityfocus.com/bid/61309/info MongoDB is prone to a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code within t...

MongoDB - 'conn' Mongo Object Remote Code Execution

source: https://www.securityfocus.com/bid/61309/info MongoDB is prone to a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code within the context of the affected application. MongoDB...

Elastix - Multiple Cross-Site Scripting Vulnerabilities

Elastix - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/60262/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code i...

Elastix - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/60262/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of...

WordPress ADIF Log Search Widget Plugin - Cross Site Scripting

WordPressADIF Log Search Widget plugin's "logbooksearch.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker c...

Acme thttpd HTTP Server - Directory Traversal

Acme thttpd HTTP Server - Directory Traversal source: https://www.securityfocus.com/bid/60010/info thttpd is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files withi...

Windows Essentials Information Disclosure Vulnerability (2813707)

This host is missing an important security update according to Microsoft Bulletin MS13-045. OpenVAS Vulnerability Test $Id: secpodms13-045.nasl 8160 2017-12-18 15:33:57Z cfischer $ Windows Essentials Information Disclosure Vulnerability 2813707 Authors: Arun Kallavi Copyright: Copyright c 2013...

Open Flash Chart - 'get-data' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59928/info Open Flash Chart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin Securimage-WP - 'siwp_test.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59816/info The Securimage-WP plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

GetSimple CMS /admin/filebrowser.php Multiple Parameter XSS

GetSimple CMS /admin/filebrowser.php Multiple Parameter XSS. CVE-2013-1420. Webapps exploit for php platform source: http://www.securityfocus.com/bid/59600/info GetSimple CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. A...

Light HTTPD Buffer Overflow Vulnerability

Light HTTPD is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BigAnt IM Server DDNF username Field Remote Overflow

Added: 04/22/2013 BID: 58998 OSVDB: 92239 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt IM Server is vulnerable to buffer overflow in the expsrv.dll library as a result of improper validation of...

Multiple Vulnerabilities in Jojo CMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Jojo CMS, which can be exploited to perform SQL Injection and Cross-Site Scripting XSS attacks. 1 SQL Injection in Jojo CMS: CVE-2013-3081 The vulnerability is caused by insufficient filtration of user-supplied input...

Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2820917)

This host is missing an important security update according to Microsoft Bulletin MS13-033. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WordPress Plugin Traffic Analyzer - aoid Cross-Site Scripting

WordPress Plugin Traffic Analyzer - aoid Cross-Site Scripting source: https://www.securityfocus.com/bid/58948/info The Traffic Analyzer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

phpMyAdmin - tbl_gis_visualization.php Multiple Cross-Site Scripting Vulnerabilities

phpMyAdmin - tblgisvisualization.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58962/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage thes...

WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58948/info The Traffic Analyzer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sophos Web Protection Appliance patience.cgi 'id' Parameter Directory Traversal

The Sophos Web Protection application running on the remote host is affected by a directory traversal vulnerability in the patience.cgi script due to improper sanitization of user-supplied input passed to the 'id' parameter. An unauthenticated, remote attacker can exploit this to retrieve arbitra...

PHP Address Book - addressbookregisterchecklogin.php?Username SQL Injection

PHP Address Book - addressbookregisterchecklogin.php?Username SQL Injection source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an...