AdQuick - account.php Cross-Site Scripting

AdQuick - account.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43477/info AdQuick is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

YourFreeWorld Ultra Classifieds - 'listads.php' Multiple Cross-Site Scripting Vulnerabilities

source: www.securityfocus.com/bid/43490/info Ultra Classifieds is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Proxy List Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43489/info Proxy List Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

GejoSoft Image Hosting Community - Cross-Site Scripting

GejoSoft Image Hosting Community - Cross-Site Scripting source: https://www.securityfocus.com/bid/43486/info GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issu...

AdQuick - 'account.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43477/info AdQuick is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

GejoSoft Image Hosting Community - Cross-Site Scripting

source: https://www.securityfocus.com/bid/43486/info GejoSoft Image Hosting Community is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

XAMPP 1.6.x - showcode.php Local File Inclusion

XAMPP 1.6.x - showcode.php Local File Inclusion source: https://www.securityfocus.com/bid/37999/info XAMPP is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this vulnerability to obtain potentially sensitive...

Scriptsez Ultimate Poll - demo_page.php Cross-Site Scripting

Scriptsez Ultimate Poll - demopage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43552/info Ultimate Poll is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities

eCardMAX - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43570/info eCardMAX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

JNM Guestbook 3.0 - index.php Cross-Site Scripting

JNM Guestbook 3.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43697/info JNM Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

WebAsyst Shop-Script - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43661/info WebAsyst Shop-Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

JNM Guestbook 3.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43697/info JNM Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Nagios 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability

Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application. Note that for an exploit to succeed,...

JNM Solutions DB Top Sites 1.0 - vote.php Cross-Site Scripting

JNM Solutions DB Top Sites 1.0 - vote.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43699/info JNM Solutions DB Top Sites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Tausch Ticket Script 3 - suchauftraege_user.php?userid SQL Injection

Tausch Ticket Script 3 - suchauftraegeuser.php?userid SQL Injection source: https://www.securityfocus.com/bid/43710/info Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attack...

Swinger Club Portal - 'start.php?go' Remote File Inclusion

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection

source: https://www.securityfocus.com/bid/43710/info Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit...

Tausch Ticket Script 3 - vote.php?descr SQL Injection

Tausch Ticket Script 3 - vote.php?descr SQL Injection source: https://www.securityfocus.com/bid/43710/info Tausch Ticket Script is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to compromi...

[ISecAuditors Security Advisories] Joomla! < 1.5.12 Multiple XSS vulnerabilities in HTTP Headers

============================================= INTERNET SECURITY AUDITORS ALERT 2009-007 - Original release date: June 30th, 2009 - Last revised: July 2nd, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS Base Score ============================================= I. VULNERABILITY...

Matterdaddy Market 1.x - index.php Cross-Site Scripting

Matterdaddy Market 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35856/info Matterdaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...