Barcode Generator 2.0 - 'LSTable.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/31419/info Barcode Generator is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in...

Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities

Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31407/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

OpenNMS 1.5.x - 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenNMS 1.5.x - 'filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Flatpress 0.804 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31407/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

EasyRealtorPRO 2008 - site_search.php Multiple SQL Injections

EasyRealtorPRO 2008 - sitesearch.php Multiple SQL Injections source: https://www.securityfocus.com/bid/31401/info EasyRealtorPRO is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issue...

OpenNMS 1.5.x - filter Cross-Site Scripting

OpenNMS 1.5.x - filter Cross-Site Scripting source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in t...

Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31306/info fuzzylime cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the...

PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/31263/info PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

phpMyAdmin 3.2 - server_databases.php Remote Command Execution

phpMyAdmin 3.2 - serverdatabases.php Remote Command Execution source: https://www.securityfocus.com/bid/31188/info phpMyAdmin is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (1)

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite 1 source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controll...

Microsoft Windows - Image Acquisition Logger ActiveX Control Arbitrary File Overwrite (2)

source: https://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input. ...

Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31055/info Silentum LoginSys is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities

Silentum LoginSys 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31055/info Silentum LoginSys is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

@Mail 5.42 and @Mail WebMail 5.0.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30992/info @Mail and @Mail WebMail are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

eliteCMS 1.0 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/30990/info eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

eliteCMS 1.0 - page SQL Injection

eliteCMS 1.0 - page SQL Injection source: https://www.securityfocus.com/bid/30990/info eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit...

EMC AlphaStor Device Manager Arbitrary Command Execution

EMC AlphaStor Device Manager is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

vTiger CRM 5.0.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30951/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

dotProject 2.1.2 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

dotProject 2.1.2 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30924/info dotProject is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...