D-Link DKVM-IP8 - 'auth.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37646/info D-LINK DKVM-IP8 is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Roundcube Webmail 0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

MercuryBoard 'index.php' Cross-Site Scripting Vulnerability

MercuryBoard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the...

pL-PHP 0.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37593/info pL-PHP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

BigAnt IM Server 'USV' Request Buffer Overflow Vulnerability

BigAnt IM Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user- supplied input. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the server. Failed exploit attempts will result in...

Pay Per Minute Video Chat Script 2.x - SQL Injection Multiple Cross-Site Scripting Vulnerabilities

Pay Per Minute Video Chat Script 2.x - SQL Injection Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40585/info Pay Per Minute Video Chat Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to...

pL-PHP 0.9 - index.php Cross-Site Scripting

pL-PHP 0.9 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37593/info pL-PHP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

MercuryBoard 1.1.5 - index.php Cross-Site Scripting

MercuryBoard 1.1.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37605/info MercuryBoard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WMNews - '/admin/wmnews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37600/info WMNews is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SLAED CMS 2.0 - stop Cross-Site Scripting

SLAED CMS 2.0 - stop Cross-Site Scripting source: https://www.securityfocus.com/bid/37574/info SLAED CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

PHP Banner Exchange 1.2 - 'signupconfirm.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40165/info PHP Banner Exchange is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Obsession-Design Image-Gallery 1.1 - 'display.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40557/info Obsession-Design Image-Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

PHPCart 3.1.2 - search.php Cross-Site Scripting

PHPCart 3.1.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37567/info PHPCart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

PHPCart 3.1.2 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37567/info PHPCart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Reamday Enterprises Magic News Plus 1.0.2 - Cross-Site Scripting

Reamday Enterprises Magic News Plus 1.0.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/37566/info Magic News Plus is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

DieselPay 1.6 - Cross-Site Scripting Directory Traversal

DieselPay 1.6 - Cross-Site Scripting Directory Traversal source: https://www.securityfocus.com/bid/37564/info DieselPay is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could exploit...

Imagevue r16 - 'amount' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37557/info Imagevue is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

StarDevelop Live Help 2.6 - SERVER Multiple Cross-Site Scripting Vulnerabilities

StarDevelop Live Help 2.6 - SERVER Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37558/info Stardevelop Live Help is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An...

DieselPay 1.6 - Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/37564/info DieselPay is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these vulnerabilities to obtain sensitive information,...

Discuz! 1.0 - 'referer' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37562/info Discuz! is prone to an cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...