Joomla! Component com_marketplace 1.2 - 'catid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37819/info The Joomla! 'commarketplace' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Technology for Solutions 1.0 - id Cross-Site Scripting

Technology for Solutions 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37811/info Technology for Solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Tribisur - cat Cross-Site Scripting

Tribisur - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/37800/info Tribisur is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! Component com_tienda - 'categoria' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37798/info The Joomla! 'comartistavenue' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

StivaSoft Stiva SHOPPING CART 1.0 - demo.php Cross-Site Scripting

StivaSoft Stiva SHOPPING CART 1.0 - demo.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40310/info Stiva SHOPPING CART is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Docmint 1.02.1 - id Cross-Site Scripting

Docmint 1.02.1 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37721/info Docmint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

PHPepperShop 2.5 - 'USER_ARTIKEL_HANDLING_AUFRUF.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37707/info PhPepperShop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Simple PHP Blog 0.5.x - search.php Cross-Site Scripting

Simple PHP Blog 0.5.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37752/info Simple PHP Blog is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

DELTAScripts PHP Links 1.0 - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37700/info DeltaScripts PHP Links is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

mini_httpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection

minihttpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploi...

DELTAScripts PHP Links 1.0 - email Cross-Site Scripting

DELTAScripts PHP Links 1.0 - email Cross-Site Scripting source: https://www.securityfocus.com/bid/37700/info DeltaScripts PHP Links is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Active Calendar 1.2 - $_SERVER[PHP_SELF] Multiple Cross-Site Scripting Vulnerabilities

Active Calendar 1.2 - $SERVERPHPSELF Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37709/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker...

Orion Application Server 2.0.7 - 'Terminal Escape Sequence in Logs' Command Injection

source: https://www.securityfocus.com/bid/37717/info Orion Application Server is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Orion Application Serv...

DigitalHive - mt Cross-Site Scripting

DigitalHive - mt Cross-Site Scripting source: https://www.securityfocus.com/bid/37697/info DigitalHive is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...

Datetopia Match Agency BiZ - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40488/info Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser o...

Datetopia Match Agency BiZ - Multiple Cross-Site Scripting Vulnerabilities

Datetopia Match Agency BiZ - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40488/info Datetopia Match Agency BiZ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker...

Sniggabo CMS 2.21 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40534/info Sniggabo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Roundcube Webmail 0.2 - Cross-Site Scripting

Roundcube Webmail 0.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

KubeLabs PHPDug 2.0 - upcoming.php Cross-Site Scripting

KubeLabs PHPDug 2.0 - upcoming.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40554/info KubeLabs PHPDug is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

D-Link DKVM-IP8 - auth.asp Cross-Site Scripting

D-Link DKVM-IP8 - auth.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/37646/info D-LINK DKVM-IP8 is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...