Neturf eCommerce Shopping Cart - searchFor Cross-Site Scripting

Neturf eCommerce Shopping Cart - searchFor Cross-Site Scripting source: https://www.securityfocus.com/bid/55667/info Neturf eCommerce Shopping Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Pligg CMS 1.1.4 - 'SERVER[php_self]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51274/info Pligg CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities

epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51149/info epesi BIM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities. 2. A cross-site request-forgery vulnerability. 3. An HTML-injection vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in th...

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Koha RFI Vulnerability (Jul 2011) - Active Check

Koha is prone to a remote file include RFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51012/info GRAND FlAGallery plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Pet Listing - preview.php Cross-Site Scripting

Pet Listing - preview.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50996/info Pet Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

Axis M10 Series Network Cameras - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Axis M10 Series Network Cameras - Cross-Site Scripting

Axis M10 Series Network Cameras - Cross-Site Scripting source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...

WordPress Plugin Pretty Link 1.5.2 - 'pretty-bar.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50921/info The Pretty Link plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Contao CMS Cross-Site Scripting Vulnerability

Contao is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

Hero 3.69 - 'month' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50878/info Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Manx Multiple Cross Site Scripting and Directory Traversal Vulnerabilities

Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

WordPress Plugin 1-jquery-photo-gallery-Slideshow-flash 1.01 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/50860/info 1-jquery-photo-gallery-slideshow-flash plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

WordPress Plugin Skysa App Bar - 'idnews' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50824/info Skysa App Bar Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...

Manx 1.0.1 - adminadmin_blocks.php?Filename Traversal Arbitrary File Access

Manx 1.0.1 - adminadminblocks.php?Filename Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/50839/info Manx is prone to multiple cross-site scripting and directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...