BlazeVideo HDTV Player Standard - '.plf' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/58624/info BlazeVideo HDTV Player Standard is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

RubyGems fastreader - 'entry_controller.rb' Remote Command Execution

source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary commands in the context of the affected...

RubyGems fastreader - entry_controller.rb Remote Command Execution

RubyGems fastreader - entrycontroller.rb Remote Command Execution source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

PHPBoost - Arbitrary File Upload Information Disclosure

PHPBoost - Arbitrary File Upload Information Disclosure source: https://www.securityfocus.com/bid/58432/info PHPBoost is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacke...

WordPress Plugin podPress - playerID Cross-Site Scripting

WordPress Plugin podPress - playerID Cross-Site Scripting source: https://www.securityfocus.com/bid/58421/info The podPress plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

Asteriskguru Queue Statistics - 'warning' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58418/info Asteriskguru Queue Statistics is prone to an cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Your Own Classifieds - Cross-Site Scripting

Your Own Classifieds - Cross-Site Scripting source: https://www.securityfocus.com/bid/58399/info Your Own Classifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Your Own Classifieds - Cross-Site Scripting

source: https://www.securityfocus.com/bid/58399/info Your Own Classifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Matrix42 Service Store - default.aspx Cross-Site Scripting

Matrix42 Service Store - default.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/59290/info Matrix42 Service Store is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

Matrix42 Service Store - 'default.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59290/info Matrix42 Service Store is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting

HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting source: https://www.securityfocus.com/bid/58293/info HP Intelligent Management Center is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Batavi - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58151/info Batavi is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

WordPress Plugin Uploader - 'blog' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58285/info The Uploader Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Batavi - index.php Cross-Site Scripting

Batavi - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/58151/info Batavi is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Geeklog - Cross-Site Scripting

source: https://www.securityfocus.com/bid/58209/info Geeklog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Bugzilla show_bug.cgi id Parameter XSS

The version of Bugzilla installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'showbug.cgi' script. An attacker may be able to leverage this to inject arbitrary HTML and script code...

OpenEMR 4.1.1 Cross Site Scripting Vulnerability

OpenEMR version 4.1.1 suffers from a cross site scripting vulnerability. OpenEMR 4.1.1 site param Remote XSS Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice...

Alt-N MDaemon 13.0.3 and 12.5.6 Email Body HTML/JS Injection Vulnerability

Exploit for windows platform in category web applications VULNERABILITY DESCRIPTION: ========================== Alt-N MDaemon is prone to an HTML/Javascript injection vulnerability because it fails to sanitize user-supplied input. Attacker-supplied HTML and/or JavaScript code could run in the...

WordPress Plugin Pretty Link - Cross-Site Scripting

source: https://www.securityfocus.com/bid/58072/info The Pretty Link plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Squirrelcart - table Cross-Site Scripting

Squirrelcart - table Cross-Site Scripting source: https://www.securityfocus.com/bid/58025/info Squirrelcart is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...