CutePHP CuteNews 1.4.1 Editnews Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17592/info CuteNews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection

source: https://www.securityfocus.com/bid/17588/info RechnungsZentrale V2 is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

PHPLister 0.4.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17591/info phpLister is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the conte...

LinPHA 1.1 - Multiple Cross-Site Scripting Vulnerabilities

LinPHA 1.1 Multiple Cross-Site Scripting Vulnerabilities. CVE-2006-1848. Webapps exploit for php platform source: http://www.securityfocus.com/bid/17581/info LinPHA is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An...

PHPLister 0.4.1 - index.php Cross-Site Scripting

PHPLister 0.4.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17591/info phpLister is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...

axoverzicht.CGI - Cross-Site Scripting

axoverzicht.CGI - Cross-Site Scripting source: https://www.securityfocus.com/bid/17584/info The axoverzicht.cgi script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

PHPLinks 2.1.22.1.3 - index.php Cross-Site Scripting

PHPLinks 2.1.22.1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17586/info The phpLinks application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...

PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17586/info The phpLinks application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting us...

Calendarix 0.7 - YearCal.php Cross-Site Scripting

Calendarix 0.7 - YearCal.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17562/info Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...

Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities

Manila 9.0.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17563/info Manila is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

PHPFaber TopSites - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17542/info phpFaber TopSites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in t...

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (1)

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities 1 source: https://www.securityfocus.com/bid/17553/info TinyPHPForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

Monster Top List 1.4 - 'functions.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17546/info Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Sphider configset.php settings_dir Parameter Remote File Inclusion

The remote host is running Sphider, an open source web spider and search engine written in PHP. The version of Sphider installed on the remote host fails to sanitize user-supplied input to the 'settingsdir' parameter of the 'admin/configset.php' script before using it in a PHP 'include' function...

PHPGuestbook 0.0.2/1.0 - HTML Injection

source: https://www.securityfocus.com/bid/17537/info phpGuestbook is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the...

Tiny Web Gallery 1.4 - index.php Cross-Site Scripting

Tiny Web Gallery 1.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17536/info Tiny Web Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

PHPGuestbook 0.0.21.0 - HTML Injection

PHPGuestbook 0.0.21.0 - HTML Injection source: https://www.securityfocus.com/bid/17537/info phpGuestbook is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

Papoo 2.1.x - print.php Cross-Site Scripting

Papoo 2.1.x - print.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17530/info Papoo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Farsinews 2.12.5 - search.php Cross-Site Scripting

Farsinews 2.12.5 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17534/info FarsiNews is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...

AR-Blog 5.2 - 'print.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17522/info The ar-blog application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting use...