ActiveNews Manager - articleId SQL Injection (2)

ActiveNews Manager - articleId SQL Injection 2 source: https://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied...

Link CMS - 'prikazInformacije.php?IDStranicaPodaci' SQL Injection

source: https://www.securityfocus.com/bid/21464/info Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21173/info BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because th...

Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities

Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21129/info Sphpblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

b2evolution 1.8.2/1.9 - '_referer_spam.page.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

b2evolution 1.8.21.9 - _404_not_found.page.php Multiple Cross-Site Scripting Vulnerabilities

b2evolution 1.8.21.9 - 404notfound.page.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Odysseus Blog 1.0 - blog.php Cross-Site Scripting

Odysseus Blog 1.0 - blog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21128/info Odysseus Blog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

Yetihost Helm 3.2.10 - Multiple Cross-Site Scripting Vulnerabilities

Yetihost Helm 3.2.10 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21096/info Helm is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Car Site Manager - csmasplistings.asp Multiple Cross-Site Scripting Vulnerabilities

Car Site Manager - csmasplistings.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

MGinternet Property Site Manager - 'detail.asp?p' SQL Injection

source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issu...

MGinternet Property Site Manager - 'listings.asp?s' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issu...

Plesk 7.58.0 - login_up.php3 Cross-Site Scripting

Plesk 7.58.0 - loginup.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/21067/info Plesk is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and...

MGinternet Property Site Manager - 'listings.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issu...

cPanel 10 - 'newuser.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21027/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

INFINICART - search.asp?search Cross-Site Scripting

INFINICART - search.asp?search Cross-Site Scripting source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...

IBM Websphere 6.0 - 'Faultactor' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21018/info IBM WebSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the...