FreePBX 2.9.0 - 2.10.0 Multiple Vulnerabilities - Active Check

FreePBX is prone to multiple cross-site scripting XSS and remote command execution RCE vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Matthew1471 BlogX - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52730/info Matthew1471 BlogX is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

NextBBS 0.6 - 'index.php?do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52728/info NextBBS is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an authentication-bypass vulnerability. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication...

Event Calendar PHP - cal_year Cross-Site Scripting

Event Calendar PHP - calyear Cross-Site Scripting source: https://www.securityfocus.com/bid/52701/info Event Calendar PHP is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Event Calendar PHP - 'cal_year' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52701/info Event Calendar PHP is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Open Journal Systems OJS 2.3.6 /lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php Multiple Parameter XSS

Open Journal Systems OJS 2.3.6 /lib/pkp/lib/tinymce/jscripts/tinymce/plugins/ibrowser/ibrowser.php Multiple Parameter XSS. Webapps exploit for php platform source: http://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software...

CMSimple 3.3 - index.php Cross-Site Scripting

CMSimple 3.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/52661/info CMSimple is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Open Journal Systems (OJS) 2.3.6 - index.php?authors[][url] Cross-Site Scripting

Open Journal Systems OJS 2.3.6 - index.php?authorsurl Cross-Site Scripting source: https://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input: 1. An arbitrary-file-deletio...

Open Journal Systems (OJS) 2.3.6 - libpkpclassescoreString.inc.php?String::stripUnsafeHtml() Method Cross-Site Scripting

Open Journal Systems OJS 2.3.6 - libpkpclassescoreString.inc.php?String::stripUnsafeHtml Method Cross-Site Scripting source: https://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize...

Open Journal Systems (OJS) 2.3.6 - 'rfiles.php' Traversal Arbitrary File Manipulation

source: https://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input: 1. An arbitrary-file-deletion vulnerability 2. A security vulnerability 3. An arbitrary-file-upload...

Open Journal Systems (OJS) 2.3.6 - Multiple Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input: 1. An arbitrary-file-deletion vulnerability 2. A security vulnerability 3. An arbitrary-file-upload...

Minify 2.1.x - 'g' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52672/info Minify is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

GNUBoard 4.34.20 - 'download.php' HTML Injection

source: https://www.securityfocus.com/bid/52622/info Gnuboard is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the affected...

Litespeed Web Server - gtitle Cross-Site Scripting

Litespeed Web Server - gtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/55946/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Synology Photo Station 5 DSM 3.2 - photo_one.php Script Cross-Site Scripting

Synology Photo Station 5 DSM 3.2 - photoone.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/52416/info Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute...

TP-Link TL-WR740N 111130 - 'ping_addr' HTML Injection

source: https://www.securityfocus.com/bid/52424/info TP-LINK TL-WR740N is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or script code could run in the context of the affected site, potentially allowing the attacker t...

EJBCA 4.0.7 - issuer Cross-Site Scripting

EJBCA 4.0.7 - issuer Cross-Site Scripting source: https://www.securityfocus.com/bid/52400/info EJBCA is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Singapore 0.10.1 - 'gallery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52399/info singapore is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

PHPMyVisites 2.4 - PHPmv2index.php Multiple Cross-Site Scripting Vulnerabilities

PHPMyVisites 2.4 - PHPmv2index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52377/info phpMyVisites is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to...