AWeb's Banner Generator 3.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...

vBulletin 3.5.1 - 'Vbugs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17407/info vBulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

AWebs Banner Generator 3.0 - Cross-Site Scripting

AWebs Banner Generator 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/17416/info AWeb's Banner Generator is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...

TalentSoft Web+ Shop 5.0 - 'Deptname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17418/info Web+ Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17405/info Jupiter CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

MD News 1 - 'admin.php' SQL Injection

source: https://www.securityfocus.com/bid/17394/info MD News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Bugzero 4.3.1 - query.jsp?msg Cross-Site Scripting

Bugzero 4.3.1 - query.jsp?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/17351/info Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

Bugzero 4.3.1 - edit.jsp Multiple Cross-Site Scripting Vulnerabilities

Bugzero 4.3.1 - edit.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17351/info Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Web-APP.net WebAPP 0.9.x - modscalendarindex.cgi?vsSD Cross-Site Scripting

Web-APP.net WebAPP 0.9.x - modscalendarindex.cgi?vsSD Cross-Site Scripting source: https://www.securityfocus.com/bid/17359/info Web-App.Org and Web-App.Net are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacke...

Bugzero 4.3.1 - 'query.jsp?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17351/info Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

Web-APP.net WebAPP 0.9.x - '/mods/calendar/index.cgi?vsSD' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17359/info Web-App.Org and Web-App.Net are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

LucidCMS 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

LucidCMS 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17360/info LucidCMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

PHP 4.x5.05.1 - PHPInfo Large Input Cross-Site Scripting

PHP 4.x5.05.1 - PHPInfo Large Input Cross-Site Scripting source: https://www.securityfocus.com/bid/17362/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

PHP 4.x/5.0/5.1 - PHPInfo Large Input Cross-Site Scripting

source: https://www.securityfocus.com/bid/17362/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

Web-APP.net WebAPP 0.9.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17359/info Web-App.Org and Web-App.Net are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

LucidCMS 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17360/info LucidCMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...

Claroline 1.x - rqmkhtml.php Cross-Site Scripting

Claroline 1.x - rqmkhtml.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17344/info Claroline is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...

SoftBiz Image Gallery - insert_rating.php?img_id SQL Injection

SoftBiz Image Gallery - insertrating.php?imgid SQL Injection source: https://www.securityfocus.com/bid/17339/info Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...

Blank'N'Berg 0.2 - Directory Traversal

source: https://www.securityfocus.com/bid/17345/info Blank'N'Berg is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

SoftBiz Image Gallery - 'mage_desc.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17339/info Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...