RMSOFT Gallery System 2.0 Images.PHP Cross-Site Scripting Vulnerability

RMSOFT Gallery System 2.0 Images.PHP Cross-Site Scripting Vulnerability. CVE-2006-5532. Webapps exploit for php platform source: http://www.securityfocus.com/bid/20676/info RMSOFT Gallery System is prone to a cross-site scripting vulnerability because the application fails to properly sanitize...

WikiNi 0.4.x - 'Waka.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/20688/info WikiNi is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. An attacker may leverage these issues to have arbitrary script code...

Dev Web Manager System 1.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20590/info DEV Web Manager System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

phpList 2.10.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20577/info PHPList is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

H-Sphere WebShell 2.x - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20532/info H-Sphere WebShell is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in th...

Debian DSA-1030-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in moodle, a course management system for online learning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas...

Xoops 2.2.3 - search.php Cross-Site Scripting

Xoops 2.2.3 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20514/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting

osCommerce 2.2 - adminmanufacturers.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

osCommerce 2.2 - admincountries.php?page Cross-Site Scripting

osCommerce 2.2 - admincountries.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user...

osCommerce 2.2 - adminbanner_manager.php?page Cross-Site Scripting

osCommerce 2.2 - adminbannermanager.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

osCommerce 2.2 - '/admin/banner_manager.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/reviews.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/stats_products_purchased.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/currencies.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

Digishop 4.0 - 'cart.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20297/info digiSHOP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context ...

Tikiwiki: Arbitrary command execution

Background Tikiwiki is a web-based groupware and content management system, developed with PHP, ADOdb and Smarty. Description A vulnerability in jhot.php allows for an unrestricted file upload to the img/wiki/ directory. Additionally, an XSS exists in the highlight parameter of...

PHP Invoice 2.2 - home.php Cross-Site Scripting

PHP Invoice 2.2 - home.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...

CubeCart 3.0.x - adminimage.php?image Cross-Site Scripting

CubeCart 3.0.x - adminimage.php?image Cross-Site Scripting source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to proper...

Phoenix Evolution CMS - '/modules/pageedit/index.php?pageid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20212/info Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...