EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow

EDItran Communications Platform editcp 4.1 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/41342/info EDItran Communications Platform editcp is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a...

NewsOffice 2.0.18 - news_show.php Cross-Site Scripting

NewsOffice 2.0.18 - newsshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41419/info NewsOffice is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41498/info PHPFABER CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities

phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41498/info PHPFABER CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execut...

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42157/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

FuseTalk 3.2/4.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/42157/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Xplico 0.5.7 - add.ctp Cross-Site Scripting (2)

Xplico 0.5.7 - add.ctp Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/41322/info Xplico is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Wiki Web Help 0.2.7 - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/41306/info Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

Wiki Web Help 0.2.7 - Cross-Site Scripting HTML Injection

Wiki Web Help 0.2.7 - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/41306/info Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

ArcademSX 2.904 - 'cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41252/info ArcademSX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Iatek PortalApp 3.34.0 - login.asp Multiple Cross-Site Scripting Vulnerabilities

Iatek PortalApp 3.34.0 - login.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41224/info Iatek PortalApp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

ArcademSX 2.904 - cat Cross-Site Scripting

ArcademSX 2.904 - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/41252/info ArcademSX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Miyabi CGI Tools 1.02 - index.pl Remote Command Execution

Miyabi CGI Tools 1.02 - index.pl Remote Command Execution source: https://www.securityfocus.com/bid/41228/info Miyabi CGI Tools is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails ...

TornadoStore 1.4.3 - SQL Injection HTML Injection

TornadoStore 1.4.3 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/41233/info TornadoStore is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues t...

Iatek PortalApp 3.3/4.0 - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41224/info Iatek PortalApp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Miyabi CGI Tools 1.02 - 'index.pl' Remote Command Execution

source: https://www.securityfocus.com/bid/41228/info Miyabi CGI Tools is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize user-supplied input. Successful...

OneCMS 2.6.1 - 'cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how t...

Limny 2.1 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41152/info Limny is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

synType CMS Cross Site Scripting

Vulnerability ID: HTB22417 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinsyntypecmscommenttextfield.html Product: synType CMS Vendor: MindArray GbR Vulnerable Version: V.0.12.2 and Probably Prior Versions Vendor Notification: 03 June 2010 Vulnerability Type: Stored XSS Cross...

Plesk Server Administrator (PSA) - locale Local File Inclusion

Plesk Server Administrator PSA - locale Local File Inclusion source: https://www.securityfocus.com/bid/40813/info Plesk Server Administrator PSA is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...