Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...

Yappa 3.1.2 - 'yappa.php' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of...

osCSS 1.2.2 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

osCSS 1.2.2 - page Cross-Site Scripting

osCSS 1.2.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

RunCMS 2.1 - check.php Cross-Site Scripting

RunCMS 2.1 - check.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41448/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

RunCMS 2.1 - 'check.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41448/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41453/info Worxware DCP-Portal is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting us...

Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Pligg 1.0.4 - 'install1.php' Cross-Site Scripting Vulnerability

Pligg 1.0.4 'install1.php' Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/41456/info Pligg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue...

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities

Worxware DCP-Portal 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41453/info Worxware DCP-Portal is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issu...

nuBuilder Local File Include and Cross Site Scripting Vulnerabilities

nuBuilder is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41387/info i-Net Solution Matrimonial Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

MoinMoin 'PageEditor.py' Cross-Site Scripting Vulnerability

MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker...

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting source: https://www.securityfocus.com/bid/41396/info SocialABC NetworX is prone to an arbitrary file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize...

Bitweaver 2.7 - fImg Cross-Site Scripting

Bitweaver 2.7 - fImg Cross-Site Scripting source: https://www.securityfocus.com/bid/41421/info Bitweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/41342/info EDItran Communications Platform editcp is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer. Attackers can exploit this issue to execute...

odCMS 1.07 - 'archive.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41422/info odCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

odCMS 1.07 - archive.php Cross-Site Scripting

odCMS 1.07 - archive.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41422/info odCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...