Maroyaka CGI Maroyaka Image Album Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Image Album is a CGI script for placing image files into websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Image Album. A remote attacker could use this vulnerability to inject arbitrary web script or HTML...

Zen Cart Cross-Site Scripting Vulnerability

Zen Cart is a PHP-based WEB application. Zen Cart suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

Multiple HTML Injection Vulnerabilities in MyBB

MyBB is a popular forum program. MyBB suffers from multiple HTML injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can execute the provided HTML and script code in the context of the affected site...

Data Source: Scopus CMS - SQL Injection Web Vulnerability

Document Title: =============== Data Source: Scopus CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1436 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID VL-ID: ====================================...

Data Source: Scopus CMS - SQL Injection Web Vulnerability

Document Title: =============== Data Source: Scopus CMS - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1436 Release Date: ============= 2015-02-25 Vulnerability Laboratory ID VL-ID: ====================================...

Cosmoshop 'index.cgi' Cross-Site Scripting Vulnerability

Cosmoshop is an online store application. A cross-site scripting vulnerability exists in Cosmoshop 'index.cgi', which can be exploited by remote attackers to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain sensitive cookies, hijack sessions,...

Drupal Avatar Uploader Arbitrary File Upload Vulnerability

Drupal is an open source content management platform. An arbitrary file upload vulnerability exists in Drupal Avatar Uploader, which allows attackers to exploit the vulnerability to upload arbitrary files and execute scripts and code...

jui_filter_rules 'jui_filter_rules.php' Arbitrary PHP Code Execution Vulnerability

juifilterrules is a filter rules application. juifilterrules 'juifilterrules.php' fails to properly filter user input, allowing remote attackers to exploit the vulnerability by submitting a request, injecting PHP code, and executing it in the WEB...

u5CMS Cross-Site Scripting Vulnerability

u5CMS is a content management system CMS based on PHP, MySQL and Apache for medium-sized websites, conferences, audit processes, PayPal payments and online surveys. The system supports WYSIWYG editor, creating survey forms and data storage. A cross-site scripting vulnerability exists in u5CMS. Th...

CVE-2015-0046

CVE-2015-0046 targets Microsoft Internet Explorer 9–11. The associated Nessus plugin confirms an IE memory corruption vulnerability that can enable remote code execution via a crafted web page. The practical remediation is applying security updates: MS15-009 (Security Update 3034682). Full protec...

CVE-2015-0031

CVE-2015-0031 affects Microsoft Internet Explorer 6–11 via a crafted web page that triggers memory corruption and remote code execution. The vulnerability is part of the IE memory‑corruption family and is addressed by MS15-009 (security update for Internet Explorer). Per the Nessus plugin, IE 9–1...

CVE-2015-0049

CVE-2015-0049 affects Microsoft Internet Explorer 8 and 10 with memory corruption allowing remote code execution via a crafted webpage. The connected Nessus/KB data confirms multiple IE memory‑corruption vulnerabilities, and MS15‑009 (KB 3034682) is the bundled security update addressing IE, with...

MantisBT 'adm_config_report.php' cross-site scripting vulnerability (CNVD-2015-01092)

MantisBT is a popular web-based bug tracking system written in PHP. A cross-site scripting vulnerability exists in MantisBT 'admconfigreport.php' due to the program failing to adequately filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or...

UBUNTU-CVE-2015-1564

Cross-site scripting XSS vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search field...

Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability

Document Title: =============== Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=1355 Release Date: ============= 2015-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1355...

IBM Security AppScan Standard Information Disclosure Vulnerability (CNVD-2015-00884)

IBM Security AppScan Standard is a set of security testing tools for Web applications from IBM in the United States. The tool automates dynamic and static security vulnerability scanning during the application development lifecycle. A security vulnerability exists in IBM Security AppScan Standard...

NPDS CMS Revolution-13 SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

Free Reprintables ArticleFR Cross-Site Scripting Vulnerability

Free Reprintables ArticleFR is an article directory scripting system from Free Reprintables Philippines. The system supports search engine optimization, anti-spam filters and page creation. A cross-site scripting vulnerability exists in Free Reprintables ArticleFR. A remote attacker can exploit...

PrestaShop cross-site scripting vulnerability (CNVD-2015-00700)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in the blocklayered-ajax.php script in the blocklayered...

CVE-2014-9571

CVE-2014-9571 affects MantisBT versions in the 1.2.x line before 1.2.19 and 1.3.x before 1.3.0-beta.2. The vulnerability is an XSS in admin/install.php that allows remote attackers to inject arbitrary web script or HTML via the admin_username or admin_password parameters. Exploitation could occur...