Joomla! Multiple SQL Injection Vulnerabilities

The host is running Joomla! and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Multiple SQL Injection Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...

SimpGB 1.49.2 - Guestbook.php Multiple Cross-Site Scripting Vulnerabilities

SimpGB 1.49.2 - Guestbook.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46033/info SimpGB is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

WordPress Recip.ly Plugin 1.1.7 - Arbitrary File Upload Vulnerability

WordPress Recip.ly plugin's "uploadImage.php" parameter is prone to a vulnerability which allows attackers to upload arbitrary files. This is because it fails to adequately clean up user-supplied input. In this way, the attackers can use this vulnerability to upload an arbitrary code and then run...

WordPress Plugin Featured Content 0.0.1 - listid Cross-Site Scripting

WordPress Plugin Featured Content 0.0.1 - listid Cross-Site Scripting source: https://www.securityfocus.com/bid/46001/info The Featured Content plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

Pivotx 2.2.0 Cross Site Scripting / Path Disclosure

================================== Vulnerability ID: HTB22788 Reference: http://www.htbridge.ch/advisory/xssinpivotx.html Product: Pivotx Vendor: Pivotx Team http://pivotx.net/ Vulnerable Version: 2.2.0 Vendor Notification: 11 January 2011 Vulnerability Type: XSS Cross Site Scripting Status:...

PivotX 2.2 - pivotxincludesblogroll.php?color Cross-Site Scripting

PivotX 2.2 - pivotxincludesblogroll.php?color Cross-Site Scripting source: https://www.securityfocus.com/bid/45996/info PivotX is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WordPress Videox7 UGC Plugin 2.5.3.2 - Cross-Site Scripting Vulnerability

This WordPress Videox7 UGC plugin's "listid" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can ste...

WordPress Plugin Featured Content 0.0.1 - 'listid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46001/info The Featured Content plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

AWStats Unspecified 'LoadPlugin' Directory Traversal Vulnerability

AWStats is prone to an unspecified directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. The impact of this issue is currently unknown. We will update this BID when more information emerges. Versions prior to AWStats 7.0 are vulnerable. OpenVAS...

WordPress Plugin BezahlCode Generator 1.0 - gen_name Cross-Site Scripting

WordPress Plugin BezahlCode Generator 1.0 - genname Cross-Site Scripting source: https://www.securityfocus.com/bid/46005/info The BezahlCode Generator Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

PivotX 2.2 - '/pivotx/includes/blogroll.php?color' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45996/info PivotX is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin Feature Slideshow 1.0.6 - 'src' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46004/info The Feature Slideshow Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46004/info The Feature Slideshow Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

WordPress Plugin Uploader 1.0 - num Cross-Site Scripting

WordPress Plugin Uploader 1.0 - num Cross-Site Scripting source: https://www.securityfocus.com/bid/45984/info The Uploader Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

WordPress Plugin oQey-Gallery 0.2 - 'tbpv_domain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46007/info The oQey-Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - tbpv_username Cross-Site Scripting

WordPress Plugin Powerhouse Museum Collection Image Grid 0.9.1.1 - tbpvusername Cross-Site Scripting source: https://www.securityfocus.com/bid/46006/info The Powerhouse Museum Collection Image Grid Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly...

WordPress Uploader Plugin 1.0 - Cross-Site Scripting Vulnerability

This WordPress Uploader plugin's "num" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Audio Plugin 0.5.1 - Cross-Site Scripting Vulnerability

This audio plugin's "showfile" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-base...

WordPress Plugin RSS Feed Reader 0.1 - rss_url Cross-Site Scripting

WordPress Plugin RSS Feed Reader 0.1 - rssurl Cross-Site Scripting source: https://www.securityfocus.com/bid/45997/info The RSS Feed Reader WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Plugin Audio 0.5.1 - showfile Cross-Site Scripting

WordPress Plugin Audio 0.5.1 - showfile Cross-Site Scripting source: https://www.securityfocus.com/bid/45991/info The Audio plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...