html-edit CMS - Multiple Vulnerabilities

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

Social Share - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/45536/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access o...

Mitel Audio and Web Conferencing (AWC) - Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/45537/info Mitel Audio and Web Conferencing AWC is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the...

Inout Webmail Script - Persistent Cross-Site Scripting

Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities

Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45481/info Radius Manager is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Radius Manager 3.6 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45481/info Radius Manager is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Social Share - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45485/info Social Share is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

PHPRS - 'model-kits.php' SQL Injection

source: https://www.securityfocus.com/bid/45467/info phpRS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modif...

Routing and Remote Access Privilege Escalation Vulnerability (2440591)

This host is missing an important security update according to Microsoft Bulletin MS10-099. OpenVAS Vulnerability Test $Id: secpodms10-099.nasl 5361 2017-02-20 11:57:13Z cfi $ Routing and Remote Access Privilege Escalation Vulnerability 2440591 Authors: Veerendra GG Copyright: Copyright c 2010...

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45420/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45395/info BlogCFC is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Articlems 2.0 - 'c[]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41511/info ArticleMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Articlems 2.0 - c[] Cross-Site Scripting

Articlems 2.0 - c Cross-Site Scripting source: https://www.securityfocus.com/bid/41511/info ArticleMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

MyBB 1.4.10 - tags.php Cross-Site Scripting

MyBB 1.4.10 - tags.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45388/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Cetera eCommerce - 'banner.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45374/info Cetera eCommerce is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

BizDir 05.10 - f_srch Cross-Site Scripting

BizDir 05.10 - fsrch Cross-Site Scripting source: https://www.securityfocus.com/bid/45342/info BizDir is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

Joomla! Component com_mailto - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45356/info The 'commailto' component for Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

WWWThread 5.0.8 Pro - showflat.pl Cross-Site Scripting

WWWThread 5.0.8 Pro - showflat.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/45303/info WWWThread is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...