PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

EZArticles - 'articles.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43483/info EZArticles is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit...

UloKI PHP Forum 2.1 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

RadAFFILIATE Links - index.php Cross-Site Scripting

RadAFFILIATE Links - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43459/info RadAFFILIATE Links is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Adobe ColdFusion Server 8.0.1 - administratorlogviewersearchlog.cfm?startRow Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - administratorlogviewersearchlog.cfm?startRow Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Adobe ColdFusion Server 8.0.1 - wizardscommon_authenticatewizarduser.cfm Query String Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - wizardscommonauthenticatewizarduser.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before usin...

Freelancers - 'post_resume.php?jobid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43475/info FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Adobe ColdFusion Server 8.0.1 - wizardscommon_logintowizard.cfm Query String Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 - wizardscommonlogintowizard.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

Freelancers - post_resume.php?jobid Cross-Site Scripting

Freelancers - postresume.php?jobid Cross-Site Scripting source: https://www.securityfocus.com/bid/43475/info FreeWebScriptz Freelancer Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

Elkagroup Elkapax - q Cross-Site Scripting

Elkagroup Elkapax - q Cross-Site Scripting source: https://www.securityfocus.com/bid/43131/info Elkagroup Elkapax is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Elkagroup Elkapax - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43131/info Elkagroup Elkapax is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

ViArt Helpdesk - products.php?category_id Cross-Site Scripting

ViArt Helpdesk - products.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ViArt CMS - forums.php?category_id Cross-Site Scripting

ViArt CMS - forums.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code coul...

TurnkeyForms Yahoo Answers Clone - questiondetail.php Cross-Site Scripting

TurnkeyForms Yahoo Answers Clone - questiondetail.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42480/info TurnkeyForms Yahoo Answers Clone is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage thi...

ViArt Helpdesk - 'reviews.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt Helpdesk - reviews.php?category_id Cross-Site Scripting

ViArt Helpdesk - reviews.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Hitron Soft Answer Me - answers.php Cross-Site Scripting

Hitron Soft Answer Me - answers.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42558/info Hitron Soft Answer Me is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

ViArt CMS - forum_topic_new.php?forum_id Cross-Site Scripting

ViArt CMS - forumtopicnew.php?forumid Cross-Site Scripting source: https://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code...