5282 matches found
PHProg 1.0 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/19942/info PHProg is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include a cross-site scripting vulnerability and a local file-include vulnerability. A successful exploit m...
YACS 6.6.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19799/info YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execut...
Anychart 3.0 - Password SQL Injection
Anychart 3.0 - Password SQL Injection source: https://www.securityfocus.com/bid/19330/info anychart is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...
Joomla! Component Liga Manager Online 2.0 - Remote File Inclusion
Joomla! Component Liga Manager Online 2.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/19234/info Liga Manager Online Joomla! Component is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...
Bosdates 3.x4.0 - Payment.php Remote File Inclusion
Bosdates 3.x4.0 - Payment.php Remote File Inclusion source: https://www.securityfocus.com/bid/19191/info Bosdates is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...
LinksCaffe 3.0 - 'links.php?newdays' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...
IDevSpot PHPHostBot 1.0 - index.php Remote File Inclusion
IDevSpot PHPHostBot 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19084/info PHPHostBot is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fi...
FlatNuke 2.5.7 - index.php Remote File Inclusion
FlatNuke 2.5.7 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/18966/info FlatNuke is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include...
Invision Power Board 2.1.x IPSClass.PHP SQL Injection Vulnerability 1
Invision Power Board 2.1.x IPSClass.PHP SQL Injection Vulnerability 1. Webapps exploit for php platform source: http://www.securityfocus.com/bid/18984/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize...
PHP Event Calendar 1.4 - calendar.php Remote File Inclusion
PHP Event Calendar 1.4 - calendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18965/info PHP Event Calendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
Farsinews 3.0 - Tiny_mce_gzip.php Directory Traversal
Farsinews 3.0 - Tinymcegzip.php Directory Traversal source: https://www.securityfocus.com/bid/18925/info Farsinews is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...
ATutor 1.5.x - 'password_reminder.php?forgot' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execute ...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
newsPHP 2006 PRO - index.php Multiple Cross-Site Scripting Vulnerabilities
newsPHP 2006 PRO - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due t...
iTunes < 6.0.5 AAC File Integer Overflow (Mac OS X)
The remote host is running iTunes, a popular jukebox program. The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files which may lead to the execution of arbitrary code. An attacker may exploit this flaw by sending a malformed AAC file to...
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18713/info The 'phpclassifieds.info' product is prone to multiple input-validation vulnerabilities. The issues include HTML- and SQL-injection vulnerabilities. These issues are due to a failu...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
PHP Event Calendar 4.2 - SQL Injection
PHP Event Calendar 4.2 - SQL Injection source: https://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...
SoftBizScripts Dating Script 1.0 - 'featured_photos.php' SQL Injection
source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...