PHP Helpdesk 0.6.16 - index.php Local File Inclusion

PHP Helpdesk 0.6.16 - index.php Local File Inclusion source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...

PHP Helpdesk 0.6.16 - 'index.php' Local File Inclusion

source: www.securityfocus.com/bid/26318/info PHP Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHP Helpdesk 0.6.16 is vulnerable to th...

Synergiser 1.2 - index.php Local File Inclusion

Synergiser 1.2 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/26289/info Synergiser is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...

Synergiser 1.2 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26289/info Synergiser is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Synergiser 1.2 RC1 is vulnerable ...

WordPress Core 2.3 - 'Edit-Post-Rows.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26228/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Saxon 5.4 - 'Menu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26237/info Saxon is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Smart-Shop - index.php Multiple Cross-Site Scripting Vulnerabilities

Smart-Shop - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26232/info SMART-SHOP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabiliti...

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26286/info Blue Coat ProxySG Management Console is prone to two cross-site scripting vulnerabilities because the application fails to properly sanitize...

PHPbasic basicFramework 1.0 - 'Includes.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/26194/info basicFramework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion

Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion source: https://www.securityfocus.com/bid/26171/info Jeebles Directory is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an...

visolfi.txt

Title : VISO apps Local File Inclusion Vulnerability Description : VISO apps is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Software: : http://www.viventus.no/visoapps/ Author : d3hydr8 Homepage : http://www.darkc0de.com Original Post :...

Hackish 1.1 - Blocco.php Cross-Site Scripting

Hackish 1.1 - Blocco.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26167/info Hackish is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this iss...

Mozilla Firefox 2.0.0.7 - Malformed XBL Constructor Remote Denial of Service

source: https://www.securityfocus.com/bid/26172/info Mozilla Firefox is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions. Firefox 2.0.0.7 is vulnerable; other...

Hackish 1.1 - 'Blocco.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26167/info Hackish is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Jeebles Technology Jeebles Directory 2.9.60 - 'download.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26171/info Jeebles Directory is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to execute local scripts or to view arbitrary files that may contai...

ReloadCMS 1.2.5 - index.php Local File Inclusion

ReloadCMS 1.2.5 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/26143/info ReloadCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to execute local scripts o...

SearchSimon Lite 1.0 - 'Filename.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26142/info SearchSimon Lite is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

rNote 0.9.7 - rnote.php Multiple Cross-Site Scripting Vulnerabilities

rNote 0.9.7 - rnote.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26140/info rNote is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities m...

rNote 0.9.7 - 'rnote.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26140/info rNote is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities may allow an attacker to perform cross-site scripting attacks on...

phpMyAdmin 2.11.1 - 'Server_Status.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26301/info phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...