BookReview 1.0 - add_review.htm Multiple Cross-Site Scripting Vulnerabilities

BookReview 1.0 - addreview.htm Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

BookReview 1.0 - add_classification.htm?isbn Cross-Site Scripting

BookReview 1.0 - addclassification.htm?isbn Cross-Site Scripting source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...

BookReview 1.0 - 'suggest_category.htm?node' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

FunkyASP AD Systems 1.1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13761/info FunkyASP AD Systems is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer...

Spread The Word - Multiple Cross-Site Scripting Vulnerabilities

Spread The Word - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13733/info Spread The Word is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

MWChat 6.8 - chat.php SQL Injection

MWChat 6.8 - chat.php SQL Injection source: https://www.securityfocus.com/bid/15198/info MWChat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

phpMyAdmin 2.x - server_databases.php Cross-Site Scripting

phpMyAdmin 2.x - serverdatabases.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15196/info phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

WordPress Core 1.5 - 'post.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13663/info Wordpress is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

JGS-Portal 3.0.13.0.2 - jgs_portal_mitgraf.php?year SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalmitgraf.php?year SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inpu...

JGS-Portal 3.0.13.0.2 - jgs_portal_sponsor.php?id SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalsponsor.php?id SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal_mitgraf.php?year' SQL Injection

source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of the SQL injection issues could...

Shop-Script - categoryId SQL Injection

Shop-Script - categoryId SQL Injection source: https://www.securityfocus.com/bid/13633/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

JGS-Portal 3.0.13.0.2 - jgs_portal.php?anzahl_beitraege SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportal.php?anzahlbeitraege SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

MetaCart E-Shop - ProductsByCategory.asp Cross-Site Scripting

MetaCart E-Shop - ProductsByCategory.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13639/info MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

JGS-Portal 3.0.13.0.2 - jgs_portal_themengraf.php?year SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalthemengraf.php?year SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

MetaCart E-Shop - 'ProductsByCategory.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13639/info MetaCart e-Shop is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Shop-Script - ProductID SQL Injection

source: https://www.securityfocus.com/bid/13635/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

OpenBB 1.0.8 - member.php Cross-Site Scripting

OpenBB 1.0.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...