WordPress Plugin WP-FaceThumb 0.1 - 'pagination_wp_facethum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

WordPress Plugin WP-FaceThumb 0.1 - pagination_wp_facethum Cross-Site Scripting

WordPress Plugin WP-FaceThumb 0.1 - paginationwpfacethum Cross-Site Scripting source: https://www.securityfocus.com/bid/53497/info WP-FaceThumb is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitra...

GetSimple CMS 3.1 admin/pages.php error Parameter Reflected XSS

GetSimple CMS 3.1 admin/pages.php error Parameter Reflected XSS. CVE-2012-6621. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53501/info GetSimple CMS is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplie...

Chevereto 1.91 - '/Upload/engine.php?v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker m...

Chevereto 1.91 - Uploadengine.php?v Cross-Site Scripting

Chevereto 1.91 - Uploadengine.php?v Cross-Site Scripting source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize user-supplied input before...

PHP Directory Traversal Vulnerability (Apr 2012)

PHP is prone to a directory traversal vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

iGuard Security Access Control Device Firmware 3.6.7427A - Cross-Site Scripting

iGuard Security Access Control Device Firmware 3.6.7427A - Cross-Site Scripting source: https://www.securityfocus.com/bid/53355/info iGuard Security Access Control is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input in the embedded web server...

Quick.CMS 4.0 - 'p' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53273/info Quick.CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Concrete5 CMS 5.5.2.1 - Information Disclosure / SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/53268/info concrete5 is prone to information-disclosure, SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to harvest sensitive information, compromi...

Concrete5 CMS 5.5.2.1 - Information Disclosure SQL Injection Cross-Site Scripting

Concrete5 CMS 5.5.2.1 - Information Disclosure SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/53268/info concrete5 is prone to information-disclosure, SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Ctek SkyRouter 4200 and 4300 Series Routers Remote Arbitrary Command Execution Vulnerability

Ctek SkyRouter 4200 and 4300 series routers are prone to a remote arbitrary command-execution vulnerability because it fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Joomla! JA T3 Framework Component Directory Traversal Vulnerability

This host is running Joomla! JA T3 Framework component and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlajat3frameworkcomdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla! JA T3 Framework Component Directory Traversal Vulnerability Authors:...

Anchor CMS 0.6-14-ga85d0a0 - id Multiple HTML Injection Vulnerabilities

Anchor CMS 0.6-14-ga85d0a0 - id Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/53181/info Anchor CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be...

ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/53145/info ownCloud is prone to a URI open-redirection vulnerability, multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could leverage the...

ownCloud 3.0.0 - index.php?redirect_url Arbitrary Site Redirect

ownCloud 3.0.0 - index.php?redirecturl Arbitrary Site Redirect source: https://www.securityfocus.com/bid/53145/info ownCloud is prone to a URI open-redirection vulnerability, multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly...

Acuity CMS 2.6.2 - Username Cross-Site Scripting

Acuity CMS 2.6.2 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/53048/info Acuity CMS is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

TeamPass 2.1.5 - login HTML Injection

TeamPass 2.1.5 - login HTML Injection source: https://www.securityfocus.com/bid/53038/info TeamPass is prone to an HTML-injection vulnerability because it fails to sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

WordPress Plugin Yahoo Answer - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Yahoo Answer - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53037/info Yahoo Answer plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it ...

Joomla! Plugin Beatz 1.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53030/info Joomla! Beatz Plugin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

WordPress All-in-One Event Calendar Plugin 1.4 - Multiple Parameter XSS

WordPress All-in-One Event Calendar plugin's /wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php multiple parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browse...