UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46280/info UMI CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Escortservice 'custid' Parameter SQL Injection Vulnerability

Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

Majordomo2 Directory Traversal Vulnerability

Majordomo2 is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ReOS Local File Include and SQL Injection Vulnerabilities

ReOS is prone to a local file-include vulnerability and multiple SQL- injection vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory- traversal strings to view and execute arbitrary local files...

Podcast Generator Local File Include and Cross Site Scripting Vulnerabilities

Podcast Generator is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files withi...

Firebook - index.html Cross-Site Scripting

Firebook - index.html Cross-Site Scripting source: https://www.securityfocus.com/bid/46143/info Firebook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code ...

MediaWiki < 1.16.2 'CSS Comments' XSS Vulnerability

MediaWiki is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HTB22800: Path disclosure in Podcast Generator

Vulnerability ID: HTB22800 Reference: http://www.htbridge.ch/advisory/pathdisclosureinpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: Path disclosure Risk...

ReOS 2.0.5 SQL Injection

Vulnerability ID: HTB22809 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos2.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

Betsy 4.0 - 'page' Local File Inclusion

source: https://www.securityfocus.com/bid/46124/info Betsy is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the...

Moodle 2.0.1 - PHPCOVERAGE_HOME Cross-Site Scripting

Moodle 2.0.1 - PHPCOVERAGEHOME Cross-Site Scripting source: https://www.securityfocus.com/bid/46085/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

MultiCMS 'lng' Parameter Local File Include Vulnerability

MultiCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allow...

WordPress Plugin TagNinja 1.0 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46090/info The TagNinja plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Joomla! Component com_frontenduseraccess - Local File Inclusion

Joomla! Component comfrontenduseraccess - Local File Inclusion source: https://www.securityfocus.com/bid/46081/info The 'comfrontenduseraccess' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/46090/info The TagNinja plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

eSyndiCat Directory Software 2.22.3 - preview Cross-Site Scripting

eSyndiCat Directory Software 2.22.3 - preview Cross-Site Scripting source: https://www.securityfocus.com/bid/46082/info eSyndiCat Directory Software is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

vBSEO 3.2.2/3.5.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/46068/info vBSEO is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46082/info eSyndiCat Directory Software is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

vBSEO 3.2.23.5.2 - Multiple Cross-Site Scripting Vulnerabilities

vBSEO 3.2.23.5.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46068/info vBSEO is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitra...

Vanilla Forums 2.0.16 - Target Cross-Site Scripting

Vanilla Forums 2.0.16 - Target Cross-Site Scripting source: https://www.securityfocus.com/bid/46039/info Vanilla Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...