Multple I-Escorts Products - 'escorts_search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43249/info Multiple I-Escorts products are prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser...

Datetopia Buy Dating Site - Cross-Site Scripting

Datetopia Buy Dating Site - Cross-Site Scripting source: https://www.securityfocus.com/bid/42973/info Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Datetopia Buy Dating Site - Cross-Site Scripting

source: https://www.securityfocus.com/bid/42973/info Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

TextPattern 'txplib_db.php' Cross Site Scripting Vulnerability

TextPattern is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...

SmarterTools SmarterStats 5.3.3819 - frmHelp.aspx Cross-Site Scripting

SmarterTools SmarterStats 5.3.3819 - frmHelp.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/43110/info SmarterTools SmarterStats is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

ZenPhoto 1.3 - zp-corefull-image.php?a SQL Injection

ZenPhoto 1.3 - zp-corefull-image.php?a SQL Injection source: https://www.securityfocus.com/bid/43021/info Zenphoto is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...

Horde Application Framework 'icon_browser.php' Cross-Site Scripting Vulnerability

Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacke...

Santafox 2.0.2 - search Cross-Site Scripting

Santafox 2.0.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43237/info Santafox is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

Horde Application Framework 3.3.8 - icon_browser.php Cross-Site Scripting

Horde Application Framework 3.3.8 - iconbrowser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43001/info Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

Santafox 2.0.2 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43237/info Santafox is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde Application Framework 3.3.8 - 'icon_browser.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43001/info Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting

Pligg CMS 1.0.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities...

NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

OneCMS 2.6.1 - index.php Cross-Site Scripting

OneCMS 2.6.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

OneCMS 2.6.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHPFinance 'group.php' SQL Injection and HTML Injection Vulnerabilities

PHPFinance is prone to an SQL-injection vulnerability and an HTML- injection vulnerability because it fails to sufficiently sanitize user- supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to r...

HP Insight Diagnostics Online Edition 8.4 - custom.php?testmode Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - custom.php?testmode Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...