Wap-motor - 'image' Directory Traversal

source: https://www.securityfocus.com/bid/44223/info Wap-motor is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Versions pri...

JCE-Tech PHP Video Script - index.php Cross-Site Scripting

JCE-Tech PHP Video Script - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44269/info JCE-Tech PHP Video Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute...

DigiOz Guestbook 1.7.2 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44237/info DigiOz Guestbook is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44266/info JCE-Tech SearchFeed Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44316/info Radvision Scopia is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

EZArticles - articles.php Cross-Site Scripting

EZArticles - articles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43483/info EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

EZArticles - 'articles.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43483/info EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit...

UloKI PHP Forum 2.1 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execute arbitrary script code in the...

Adobe ColdFusion Server 8.0.1 - wizardscommon_authenticatewizarduser.cfm Query String Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - wizardscommonauthenticatewizarduser.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before usin...

Valve Software Source Engine - Format String

Valve Software Source Engine - Format String source: https://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attack...

RadAFFILIATE Links - index.php Cross-Site Scripting

RadAFFILIATE Links - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43459/info RadAFFILIATE Links is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Adobe ColdFusion Server 8.0.1 - administratorlogviewersearchlog.cfm?startRow Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - administratorlogviewersearchlog.cfm?startRow Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Freelancers - 'post_resume.php?jobid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43475/info FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Adobe ColdFusion Server 8.0.1 - wizardscommon_logintowizard.cfm Query String Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - wizardscommonlogintowizard.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Adobe ColdFusion Server 8.0.1 - '/wizards/common/_authenticatewizarduser.cfm' Query String Cross-Site Scripting

source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of...

Freelancers - 'placebid.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43475/info FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Freelancers - placebid.php?id Cross-Site Scripting

Freelancers - placebid.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/43475/info FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

ViArt Helpdesk - products.php?category_id Cross-Site Scripting

ViArt Helpdesk - products.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...