Squirrelmail 1.4.x - Redirect.php Local File Inclusion

Squirrelmail 1.4.x - Redirect.php Local File Inclusion source: https://www.securityfocus.com/bid/18231/info SquirrelMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow unauthorized users to view files and to...

DELTAScripts PHP Pro Publish 2.0 - Multiple Cross-Site Scripting Vulnerabilities

DELTAScripts PHP Pro Publish 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18243/info PHP Pro Publish is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Enigma Haber 4.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18226/info Enigma Haber is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser ...

Abarcar Realty Portal 5.1.5 - 'content.php' SQL Injection

source: https://www.securityfocus.com/bid/18218/info Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Tekno.Portal - 'Bolum.php' SQL Injection

source: https://www.securityfocus.com/bid/18216/info Tekno.Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

SiteBuilder-FX - 'top.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18756/info SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Abarcar Realty Portal 5.1.5 - content.php SQL Injection

Abarcar Realty Portal 5.1.5 - content.php SQL Injection source: https://www.securityfocus.com/bid/18218/info Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

ToendaCMS 0.7 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...

D-Link Airspot DSA-3100 Gateway - Login_error.SHTML Cross-Site Scripting

D-Link Airspot DSA-3100 Gateway - Loginerror.SHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An...

EVA-Web 2.1.2 - 'rubrique.php3?date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

D-Link Airspot DSA-3100 Gateway - 'Login_error.SHTML' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18168/info The D-Link Airspot DSA-3100 Gateway device is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

EVA-Web 2.1.2 - article-album.php3?debut_image Cross-Site Scripting

EVA-Web 2.1.2 - article-album.php3?debutimage Cross-Site Scripting source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

EVA-Web 2.1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

TikiWiki 1.9 - tiki-lastchanges.php Multiple Cross-Site Scripting Vulnerabilities

TikiWiki 1.9 - tiki-lastchanges.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18143/info TikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Photoalbum BW 1.3 - index.php Cross-Site Scripting

Photoalbum BW 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...

Photoalbum B&W 1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browse...

TikiWiki 1.9 - 'tiki-lastchanges.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18143/info TikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in th...

ASPBB 0.5.2 - 'Perform_search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18146/info ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromis...

SaPHPLesson 2.0 - show.php SQL Injection

SaPHPLesson 2.0 - show.php SQL Injection source: https://www.securityfocus.com/bid/18117/info SaPHPLesson is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...