Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

Indexu 5.0/5.3 - 'user_detail.php?u' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

Indexu 5.05.3 - Sendmail.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - Sendmail.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

DT_Guestbook 1.0 - index.php Cross-Site Scripting

DTGuestbook 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22078/info The 'dtguestbook' program is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service

Oftpd 0.3.7 - Unsupported Address Family Remote Denial of Service source: https://www.securityfocus.com/bid/22073/info Oftpd Server is prone to a remote denial-of-service vulnerability because it mishandles unexpected user-supplied input. Exploiting this issue allows remote attackers to crash the...

Liens_Dynamiques 2.1 - Multiple Cross-Site Scripting Vulnerabilities

LiensDynamiques 2.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22070/info The 'liensdynamiques' program is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker...

Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion

Jax Petition 3.06 Book - smileys.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

InstantASP 4.1 - 'Members1.aspx' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and...

InstantASP 4.1 - Members1.aspx Multiple Cross-Site Scripting Vulnerabilities

InstantASP 4.1 - Members1.aspx Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

Liens_Dynamiques 2.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22070/info The 'liensdynamiques' program is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication...

WinZip 9.0 - Command Line Remote Buffer Overflow

WinZip 9.0 - Command Line Remote Buffer Overflow source: https://www.securityfocus.com/bid/22020/info WinZip is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may...

phpBB 2.0.21 - privmsg.php HTML Injection

phpBB 2.0.21 - privmsg.php HTML Injection source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

phpBB 2.0.21 - 'privmsg.php' HTML Injection

source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of th...

MediaWiki 1.x - 'AJAX index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21956/info MediaWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

iPlanet Web Server 4.1 - Search Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/21977/info iPlanet Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Novell Access Manager 3 Identity Server - IssueInstant Cross-Site Scripting

Novell Access Manager 3 Identity Server - IssueInstant Cross-Site Scripting source: https://www.securityfocus.com/bid/21921/info Access Manager Identity Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

Shopstorenow E-Commerce Shopping Cart - Orange.asp SQL Injection

Shopstorenow E-Commerce Shopping Cart - Orange.asp SQL Injection source: https://www.securityfocus.com/bid/21905/info Shopstorenow E-commerce Shopping Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...

EditTag 1.2 - mkpw_mp.cgi?plain Cross-Site Scripting

EditTag 1.2 - mkpwmp.cgi?plain Cross-Site Scripting source: https://www.securityfocus.com/bid/21891/info EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Kolayindir Download - 'down.asp' SQL Injection

source: https://www.securityfocus.com/bid/21889/info Kolayindir Download is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...