Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting

Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/28148/info Neptune Web Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting source: https://www.securityfocus.com/bid/28139/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ImageVue 1.7 - popup.php?path Cross-Site Scripting

ImageVue 1.7 - popup.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

ImageVue 1.7 - 'dir2.php?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Specimen Image Database - taxonservice.php?dir Remote File Inclusion

Specimen Image Database - taxonservice.php?dir Remote File Inclusion source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...

ImageVue 1.7 - dirxml.php?path Cross-Site Scripting

ImageVue 1.7 - dirxml.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/28116/info Check Point VPN-1 UTM Edge is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

Microworld eScan Server 9.0.742 - Directory Traversal

Microworld eScan Server 9.0.742 - Directory Traversal source: https://www.securityfocus.com/bid/28127/info MicroWorld eScan Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access...

Podcast Generator 0.96.2 - 'set_permissions.php' Cross-Site Scripting Vulnerability

Podcast Generator 0.96.2 'setpermissions.php' Cross-Site Scripting Vulnerability. CVE-2008-1212. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28106/info Podcast Generator is prone to a cross-site scripting vulnerability because it fails to adequately sanitize...

MG2 - list Cross-Site Scripting

MG2 - list Cross-Site Scripting source: https://www.securityfocus.com/bid/28098/info MG2 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

MG2 - 'list' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28098/info MG2 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

BSD PPP pppx.conf - Local Denial of Service

BSD PPP pppx.conf - Local Denial of Service source: https://www.securityfocus.com/bid/28090/info BSD PPP is prone to a local denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can leverage this issue to crash the application and...

KC Wiki 1.0 - simplestwiki.php?page Remote File Inclusion

KC Wiki 1.0 - simplestwiki.php?page Remote File Inclusion source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remo...

KC Wiki 1.0 - '/minimal/wiki.php?page' Remote File Inclusion

source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

PHPMyTourney 2 - tourneyindex.php Remote File Inclusion

PHPMyTourney 2 - tourneyindex.php Remote File Inclusion source: https://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fi...

PHPMyTourney 2 - '/tourney/index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Centreon 1.4.2.3 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive information that may lead to further attacks. This...

NetOffice Dwins 1.3 - Authentication Bypass Arbitrary File Upload

NetOffice Dwins 1.3 - Authentication Bypass Arbitrary File Upload source: https://www.securityfocus.com/bid/28051/info netOffice Dwins is prone to a vulnerability that allows attackers to bypass authentication as well as a vulnerability that allows attackers to upload arbitrary files. These issue...