ASPBB 0.5.2 - 'default.asp?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

obotix IP Camera M1 1.9.4 .7M10 2.0.5.2 - help Script Cross-Site Scripting

obotix IP Camera M1 1.9.4 .7M10 2.0.5.2 - help Script Cross-Site Scripting source: https://www.securityfocus.com/bid/18022/info The Mobotix IP camera is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the device to properly sanitize user-supplied input...

Open Wiki 0.78 - ow.asp Cross-Site Scripting

Open Wiki 0.78 - ow.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18013/info Open Wiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

BoastMachine 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18012/info BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...

PHPRemoteView - PRV.php Multiple Cross-Site Scripting Vulnerabilities

PHPRemoteView - PRV.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17994/info PhpRemoteView is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Gphotos 1.41.5 - index.php?rep Cross-Site Scripting

Gphotos 1.41.5 - index.php?rep Cross-Site Scripting source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the...

Gphotos 1.41.5 - index.php?rep Traversal Arbitrary Directory Listing

Gphotos 1.41.5 - index.php?rep Traversal Arbitrary Directory Listing source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a...

Ipswitch WhatsUp Professional 2006 - NmConsoleToolResults.asp?sHostname Cross-Site Scripting

Ipswitch WhatsUp Professional 2006 - NmConsoleToolResults.asp?sHostname Cross-Site Scripting source: https://www.securityfocus.com/bid/17964/info WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

Geeklog 1.4 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the applicati...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successfu...

EPublisherPro 0.9.7 - Moreinfo.asp Cross-Site Scripting

EPublisherPro 0.9.7 - Moreinfo.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/17907/info EPublisherPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminview.asp?searchFor SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These...

timobraun Dynamic Galerie 1.0 - index.php?pfad Cross-Site Scripting

timobraun Dynamic Galerie 1.0 - index.php?pfad Cross-Site Scripting source: https://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminedit.asp?ID SQL Injection

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminedit.asp?ID SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date SQL Injection source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issu...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/main.asp?date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/edit.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Singapore 0.9.7 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17874/info The 'singapore' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed...

timobraun Dynamic Galerie 1.0 - 'galerie.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17896/info Dynamic Galerie is prone to a directory-traversal vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabiliti...