Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities

Comersus Backoffice Plus - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15118/info BackOffice Plus is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

Complete PHP - Counter Cross-Site Scripting

Complete PHP - Counter Cross-Site Scripting source: https://www.securityfocus.com/bid/15112/info Complete PHP Counter is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...

Cyphor 0.19 - newmsg.php?fid SQL Injection

Cyphor 0.19 - newmsg.php?fid SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data...

Utopia News Pro 1.1.3 - footer.php Multiple Cross-Site Scripting Vulnerabilities

Utopia News Pro 1.1.3 - footer.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15027/info Utopia News Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

TellMe 1.2 - Multiple Cross-Site Scripting Vulnerabilities

TellMe 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15012/info TellMe is prone to multiple cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have...

IceWarp Web Mail 5.5.1 - 'calendar_w.html?createdataCX' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14980/info IceWarp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

SquirrelMail 1.4.2 Address Add Plugin - 'add.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14973/info SquirrelMail Address Add Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user in...

CubeCart 3.0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities

CubeCart 3.0.3 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14962/info CubeCart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

PHP Advanced Transfer Manager 1.30 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14887/info PHP Advanced Transfer Manager is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitra...

vBulletin 1.0.1 lite2.x3.0 - admincptemplate.php Multiple Cross-Site Scripting Vulnerabilities

vBulletin 1.0.1 lite2.x3.0 - admincptemplate.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Noahs Classifieds 1.3 - index.php Cross-Site Scripting

Noahs Classifieds 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14835/info Noah's Classifieds is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thi...

Land Down Under 601602700701800801 - events.php HTML Injection

Land Down Under 601602700701800801 - events.php HTML Injection source: https://www.securityfocus.com/bid/14746/info Land Down Under is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamicall...

Unclassified NewsBoard 1.5.3 - 'Description' HTML Injection

source: https://www.securityfocus.com/bid/14748/info Unclassified NewsBoard is prone to an HTML injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed i...

phpMyAdmin 2.x - error.php Cross-Site Scripting

phpMyAdmin 2.x - error.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14675/info phpMyAdmin is prone to a cross-site scripting vulnerability. This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Such an attack woul...

phpMyAdmin 2.x - 'error.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14675/info phpMyAdmin is prone to a cross-site scripting vulnerability. This issue may be exploited to steal cookie-based authentication credentials from legitimate users of the software. Such an attack would require that the victim follows a malicious li...

paFileDB auth.php pafiledbcookie Cookie SQL Injection

The remote version of paFileDB suffers from a flaw by which an attacker can gain access to the application's administrative control panel by means of a SQL injection attack via a specially crafted cookie. Note that successful exploitation requires that paFileDB be configured with '$authmethod' se...

SaveWebPortal 3.4 - Multiple Cross-Site Scripting Vulnerabilities

SaveWebPortal 3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14642/info SaveWebPortal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

Land Down Under 800 - 'journal.php?w' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14619/info Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

ATutor 1.5.1 - login.php?course Cross-Site Scripting

ATutor 1.5.1 - login.php?course Cross-Site Scripting source: https://www.securityfocus.com/bid/14598/info ATutor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...

ECW Shop 6.0.2 - index.php Cross-Site Scripting

ECW Shop 6.0.2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14578/info ECW Shop is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. This type of exploitation could allow for theft of cookie-base...