SilverStripe CMS 2.4.x - 'BackURL' Open Redirection

source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. SilverStripe 2.4.7 and prior are...

SilverStripe CMS 2.4.x - BackURL Open Redirection

SilverStripe CMS 2.4.x - BackURL Open Redirection source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks a...

PhpTax 0.8 'drawimage.php' Remote Arbitrary Command Execution Vulnerability

PhpTax is prone to a remote arbitrary command execution vulnerability because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Novell eDirectory Multiple Buffer Overflow Vulnerabilities (CVE-2006-5478) - Active Check

Novell eDirectory is prone to multiple multiple stack based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Interspire Email Marketer - Cross-Site Scripting / HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/55829/info Interspire Email Marketer is prone to the following input-validation vulnerabilities because it fails to properly sanitize user-supplied input: 1. An SQL injection vulnerabilities 2. Multiple HTML injection vulnerabilities 3. A cross-site...

Open Realty - 'select_users_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

ZenPhoto - admin-news-articles.php Cross-Site Scripting

ZenPhoto - admin-news-articles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55755/info Zenphoto is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55749/info The Akismet plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Plugin ABC Test - id Cross-Site Scripting

WordPress Plugin ABC Test - id Cross-Site Scripting source: https://www.securityfocus.com/bid/55689/info The ABC Test plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Fedora Core 1 : coreutils-5.0-34.1 (2004-091)

An updated coreutils package is available fixing an issue in the ls1 utility, described at : https://vulners.com/cve/CVE-2003-0853 Note that this vulnerability affects Internet-facing services which execute ls1 with user-supplied input, and although wu-ftpd is one such service it is not supplied...

WordPress Plugin MF Gig Calendar - Cross-Site Scripting

WordPress Plugin MF Gig Calendar - Cross-Site Scripting source: https://www.securityfocus.com/bid/55622/info The MF Gig Calendar plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Poweradmin - index.php Cross-Site Scripting

Poweradmin - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55619/info Poweradmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Poweradmin - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55619/info Poweradmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

AxisInternet VoIP Manager - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55589/info AxisInternet VoIP Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute...

AxisInternet VoIP Manager - Multiple Cross-Site Scripting Vulnerabilities

AxisInternet VoIP Manager - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55589/info AxisInternet VoIP Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamical...

minimal Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55577/info minimal Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

SquidClamav clwarn.cgi url Parameter XSS

The version of SquidClamav installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'url' parameter of the 'clwarn.cgi' script. An attacker may leverage this issue to execute arbitrary script in the browser o...

WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities

WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55605/info Purity theme for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage thes...

Cloudsafe365 Plugin for WordPress 'file' Parameter Traversal Arbitrary File Access

The Cloudsafe365 Plugin for WordPress installed on the remote host is affected by a directory traversal vulnerability due to a failure to properly sanitize user-supplied input to the 'file' parameter of the admin/editor/cs365edit.php script. This vulnerability allows an unauthenticated, remote...

Cm3 CMS - 'search.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55395/info Cm3 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...