NextPage LivePublish 2.02 - 'LPEXT.dll' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23270/info LivePublish is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Advanced Poll 2.0.2 - common.inc.php Remote File Inclusion

Advanced Poll 2.0.2 - common.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have a...

PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities

PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/7309/info phPay has been reported prone to multiple path disclosure vulnerabilities. It has been reported that when specially crafted requests are made for many phPay pages and include files, an...