BrowserCRM - Results.PHP Cross-Site Scripting Vulnerability

BrowserCRM 0 Results.PHP Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/16435/info BrowserCRM is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

sPaiz-Nuke - modules.php Cross-Site Scripting

sPaiz-Nuke - modules.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16412/info sPaiz-Nuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

sPaiz-Nuke - 'modules.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16412/info sPaiz-Nuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

RCBlog index.php post Parameter Traversal Arbitrary File Access

The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. An attacker can use this to access arbitrary files on the remote host provided PHP's 'magicquotes' setting is...

Daffodil CRM 1.5 - 'Userlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/16433/info Daffodil CRM is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise t...

UBBCentral UBB.Threads 6.3 - 'showflat.php' SQL Injection

source: https://www.securityfocus.com/bid/16520/info UBB.Threads is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise th...

AndoNET Blog 2004.9.2 - Comentarios.php SQL Injection

AndoNET Blog 2004.9.2 - Comentarios.php SQL Injection source: https://www.securityfocus.com/bid/16393/info AndoNET Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...

My Little Homepage Products - BBCode Link Tag Script Injection

My Little Homepage Products - BBCode Link Tag Script Injection source: https://www.securityfocus.com/bid/16395/info My Little Homepage Web log, guestbook, and forum are prone to a script injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied...

Oracle Text SQL injection vulnerability

Overview Oracle Text is vulnerable to SQL injection, which could allow a remote attacker to execute arbitrary SQL commands on a vulnerable Oracle installation. Description According to Oracle:Oracle Text uses standard SQL to index, search, and analyze text and documents stored in the Oracle...

SleeperChat 0.3f - index.php Cross-Site Scripting

SleeperChat 0.3f - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16363/info SleeperChat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

PixelPost 1.4.3 - User Comment HTML Injection

source: https://www.securityfocus.com/bid/16362/info Pixelpost is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

SleeperChat 0.3f - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16363/info SleeperChat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

BlogPHP 1.2 - Multiple SQL Injections

BlogPHP 1.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

WebspotBlogging 3.0 - login.php SQL Injection

WebspotBlogging 3.0 - login.php SQL Injection source: https://www.securityfocus.com/bid/16319/info WebspotBlogging is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

SaralBlog 1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16306/info saralblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

PowerPortal 1.11.3 - search.php Cross-Site Scripting

PowerPortal 1.11.3 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16279/info PowerPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Bit 5 Blog 8.1 - index.php SQL Injection

Bit 5 Blog 8.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

RedKernel Referrer Tracker 1.1.0-3 - Rkrt_stats.php Cross-Site Scripting

RedKernel Referrer Tracker 1.1.0-3 - Rkrtstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16266/info Referrer Tracker is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

Faq-O-Matic 2.711 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16251/info Faq-O-Matic is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...