JetPhoto 1.02.02.1 - Slideshow.php?name Cross-Site Scripting

JetPhoto 1.02.02.1 - Slideshow.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Dokeos 1.x - 'viewtopic.php' SQL Injection

source: https://www.securityfocus.com/bid/17463/info Dokeos is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

JetPhoto 1.0/2.0/2.1 - 'detail.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

JetPhoto 1.0/2.0/2.1 - 'gallery.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

JetPhoto 1.02.02.1 - detail.php?page Cross-Site Scripting

JetPhoto 1.02.02.1 - detail.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

JetPhoto 1.02.02.1 - gallery.php?page Cross-Site Scripting

JetPhoto 1.02.02.1 - gallery.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/17449/info JetPhoto is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

Indexu 5.0 - Multiple Remote File Inclusions

Indexu 5.0 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/17470/info The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can explo...

Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17473/info Tritanium Bulletin Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script co...

SWSoft Confixx 3.1.2 - 'Jahr' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17466/info Confixx is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

PHPMyForum 4.0 - index.php?type CRLF Injection

PHPMyForum 4.0 - index.php?type CRLF Injection source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

ShopWeezle 2.0 - index.php Multiple SQL Injections

ShopWeezle 2.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

ShopWeezle 2.0 - 'login.php?itemID' SQL Injection

source: https://www.securityfocus.com/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Shadowed Portal 5.7 - Load.php Cross-Site Scripting

Shadowed Portal 5.7 - Load.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17430/info Shadowed Portal is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...

PHPWebGallery 1.4.1 - 'category.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17421/info PHPWebGallery is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...

Shadowed Portal 5.7 - 'Load.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17430/info Shadowed Portal is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

JBook 1.3 - index.php Cross-Site Scripting

JBook 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17419/info JBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

PHPMyForum 4.0 - page Cross-Site Scripting

PHPMyForum 4.0 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue...

PHPMyForum 4.0 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

VegaDNS 0.9.9 - 'index.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/17433/info VegaDNS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successfu...

TalentSoft Web+ Shop 5.0 - Deptname Cross-Site Scripting

TalentSoft Web+ Shop 5.0 - Deptname Cross-Site Scripting source: https://www.securityfocus.com/bid/17418/info Web+ Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...