Phorum 5.1.20 - includecontrolcenterusers.php Multiple Method Privilege Escalations

Phorum 5.1.20 - includecontrolcenterusers.php Multiple Method Privilege Escalations source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues,...

Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection

Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site...

TJSChat 0.95 - You.php Cross-Site Scripting

TJSChat 0.95 - You.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23593/info TJSChat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...

Phorum 5.1.20 - admin.php?module[] Full Path Disclosure

Phorum 5.1.20 - admin.php?module Full Path Disclosure source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting...

Phorum 5.1.20 - '/include/controlcenter/users.php' Multiple Method Privilege Escalations

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

TJSChat 0.95 - 'You.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23593/info TJSChat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Wabbit Gallery Script 0.9 - showpic.php Multiple Cross-Site Scripting Vulnerabilities

Wabbit Gallery Script 0.9 - showpic.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/23526/info Wabbit Gallery Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

BloofoxCMS 0.2.2 - 'Img_Popup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23487/info BloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Doop Content Management System 1.3.x - Multiple Input Validation Vulnerabilities

Doop Content Management System 1.3.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/23482/info Doop Content Management System is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input...

MailBee WebMail Pro 3.4 - 'Check_login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23481/info MailBee WebMail Pro is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

TuMusika Evolution 1.6 - index.php Cross-Site Scripting

TuMusika Evolution 1.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23452/info TuMusika Evolution is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

DotClear 1.2.x - ecriretrackback.php?post_id Cross-Site Scripting

DotClear 1.2.x - ecriretrackback.php?postid Cross-Site Scripting source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

DotClear 1.2.x - '/ecrire/trackback.php?post_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Einfacher Passworschutz - index.php Cross-Site Scripting

Einfacher Passworschutz - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23395/info Einfacher Passworschutz is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

QuizShock 1.6.1 - 'auth.php' HTML Injection

source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowi...

PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Livor 2.5 - index.php Cross-Site Scripting

Livor 2.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23353/info Livor is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Livor 2.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23353/info Livor is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Atlassian JIRA 3.4.2 - IssueNavigator.JSPA Cross-Site Scripting

source: https://www.securityfocus.com/bid/23244/info Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...