6480 matches found
Pulsewiki And Pawfaliki 0.5.1 - index.php Local File Inclusion
Pulsewiki And Pawfaliki 0.5.1 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/25575/info Pulsewiki and Pawfaliki are prone to a local file-include vulnerability because the software fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an...
Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting
source: https://www.securityfocus.com/bid/25531/info Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...
AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow
AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow source: https://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary...
Absolute Poll Manager XE 4.1 - xlaapmview.asp Cross-Site Scripting
Absolute Poll Manager XE 4.1 - xlaapmview.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/25492/info Absolute Poll Manager XE is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an...
Abledesign Dynamic Picture Frame XSS
Vendor Site: http://abledesign.com/ Version affected: ??? Demo: http://abledesign.com/demo/pframe.php Class: Input Validation Error Overview: Dynamic Picture Frame is a PHP script which allows you to add a variety of picture frames of any size to images on your website. Dynamic Picture Frame fail...
PHPGedView 4.1 - login.php Cross-Site Scripting
PHPGedView 4.1 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25458/info PhpGedView is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...
AutoIndex PHP Script 2.2.2 - PHP_SELF index.php Cross-Site Scripting
AutoIndex PHP Script 2.2.2 - PHPSELF index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26411/info AutoIndex PHP Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to...
autoindexXSS.txt
Title : AutoIndex PHP Script searchmode Cross-Site Scripting Vulnerability Description : AutoIndex PHP Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Software : http://autoindex.sourceforge.net/ Vuln. Version : = 2.2...
SimpleFAQ Component for Joomla! 'aid' Parameter SQLi
The version of the SimpleFAQ component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the simplephp.php script due to improper sanitization of user-supplied input to the 'aid' parameter before using it to construct database queries in the...
Skulltag Huffman 0.97d-beta4.1 - Packet Decompression Remote Heap Buffer Overflow
source: https://www.securityfocus.com/bid/25423/info Skulltag is prone to a remote heap-based buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied input. Attackers can exploit this issue to execute arbitrary code with the privileges of the user runni...
coWiki - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25393/info coWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
coWiki - index.php Cross-Site Scripting
coWiki - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25393/info coWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting
ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/25391/info ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage...
m-phorum 0.3 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25394/info m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion
source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
PHP Hosting Biller 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in...
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perfor...
Text File Search Classic - 'TextFileSearch.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25350/info Text File Search Classic is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Apache Tomcat 6.0.13 - Host Manager Servlet Cross-Site Scripting
Apache Tomcat 6.0.13 - Host Manager Servlet Cross-Site Scripting source: https://www.securityfocus.com/bid/25314/info Apache Tomcat Host Manager Servlet is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit...