Land Down Under 800 - 'journal.php?w' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14619/info Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

Land Down Under 800/801 - 'forums.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the attacker to compromise the...

Woltlab Burning Board 2.x - 'ModCP.php' SQL Injection

source: https://www.securityfocus.com/bid/14617/info Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

ATutor 1.5.1 - login.php?course Cross-Site Scripting

ATutor 1.5.1 - login.php?course Cross-Site Scripting source: https://www.securityfocus.com/bid/14598/info ATutor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...

PHPTB Topic Board 2.0 - 'dev_o.php?absolutepath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-side script...

PHPFreeNews 1.40 - NewsCategoryForm.php?NewsMode Cross-Site Scripting

PHPFreeNews 1.40 - NewsCategoryForm.php?NewsMode Cross-Site Scripting source: https://www.securityfocus.com/bid/14590/info PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

ECW Shop 6.0.2 - index.php Cross-Site Scripting

ECW Shop 6.0.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14578/info ECW Shop is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. This type of exploitation could allow for theft of cookie-base...

ECW Shop 6.0.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14578/info ECW Shop is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. This type of exploitation could allow for theft of cookie-based authentication credentials; other attacks are...

Soft4e ECW-Shop 6.0.2 - index.php SQL Injection

Soft4e ECW-Shop 6.0.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/14576/info ECW Shop is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. The consequences of...

CPaint 1.3 - xmlhttp Request Input Validation

CPaint 1.3 - xmlhttp Request Input Validation source: https://www.securityfocus.com/bid/14577/info CPAINT is prone to an input validation vulnerability. This issue occurs because the application fails to properly sanitize malicious scripts and requests from user-supplied input. Successful...

PersianBlog - 'Userslist.asp' SQL Injection

source: https://www.securityfocus.com/bid/14575/info PersianBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

My Image Gallery 1.4.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14570/info My Image Gallery is prone to multiple cross-site scripting vulnerabilities due to improper sanitization of user-supplied input. An attacker can exploit these vulnerabilities to inject html and script code into the Web browser of an unsuspecting...

MyBulletinBoard (MyBB) RC4 - 'member.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise...

SysCP < 1.2.11 Multiple Script Command Execution Vulnerabilities

The remote host is running SysCP, an open source control panel written in PHP. The version of SysCP installed on the remote host uses user-supplied input to several variables in various scripts without sanitizing it. Provided PHP's 'registerglobals' setting is enabled, an attacker can exploit the...

VegaDNS 0.8.10.9.80.9.9 - index.php Cross-Site Scripting

VegaDNS 0.8.10.9.80.9.9 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14538/info VegaDNS is vulnerable to cross-site scripting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

VegaDNS 0.8.1/0.9.8/0.9.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14538/info VegaDNS is vulnerable to cross-site scripting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

TriggerTG TClanPortal 3.0 - Multiple SQL Injections

TriggerTG TClanPortal 3.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/14516/info TClanPortal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Invision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site Scripting

Invision Power Board IP.Board 1.0.3 - Attached File Cross-Site Scripting source: https://www.securityfocus.com/bid/14492/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

FunkBoard 0.66 - reply.php Multiple Cross-Site Scripting Vulnerabilities

FunkBoard 0.66 - reply.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting

Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...