OSClass 2.3.3 - 'index.php?sCategory' SQL Injection

source: https://www.securityfocus.com/bid/51662/info OSClass is prone to SQL-injection and cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

SolarWinds Orion Data Storage Manager SQL Injection and XSS Vulnerabilities

This host is running SolarWinds Orion Data Storage Manager and is prone SQL injection and cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsolarwindsorionstoragemanagermultvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ SolarWinds Orion Data Storage Manager SQL Injection a...

Syneto Unified Threat Management 1.3.3/1.4.2 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will...

OneOrZero AIMS 'index.php' Cross Site Scripting Vulnerability

OneOrZero AIMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker t...

OneOrZero AIMS 'index.php' XSS Vulnerability

OneOrZero AIMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OneOrZero AIMS - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51549/info OneOrZero AIMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

ATutor 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities

ATutor 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51423/info ATutor is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacke...

PHP Membership Site Manager Script 2.1 - index.php Cross-Site Scripting

PHP Membership Site Manager Script 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51416/info PHP Membership Site Manager Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically...

BoltWire 3.4.16 - index.php Multiple Cross-Site Scripting Vulnerabilities

BoltWire 3.4.16 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51422/info BoltWire is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Annuaire PHP - sites_inscription.php Multiple Cross-Site Scripting Vulnerabilities

Annuaire PHP - sitesinscription.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51434/info Annuaire PHP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thes...

MailEnable 6.02 - ForgottonPassword.aspx Cross-Site Scripting

MailEnable 6.02 - ForgottonPassword.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/51401/info MailEnable is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

KnowledgeTree 3.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51373/info KnowledgeTree is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Kayako SupportSuite 3.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/51377/info Kayako SupportSuite is prone to the following vulnerabilities: 1. Multiple HTML-injection vulnerabilities. 2. A remote code-execution vulnerability. 3. Multiple cross-site scripting vulnerabilities. Successful exploits will allow...

PHP-Fusion 7.2.4 - downloads.php Cross-Site Scripting

PHP-Fusion 7.2.4 - downloads.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51365/info PHP-Fusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may levera...

PHP-Fusion 7.2.4 - 'downloads.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51365/info PHP-Fusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

Clipbucket 2.6 - groups.php?cat Cross-Site Scripting

Clipbucket 2.6 - groups.php?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Clipbucket 2.6 - collections.php?cat Cross-Site Scripting

Clipbucket 2.6 - collections.php?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...

Clipbucket 2.6 - search_result.php?query Cross-Site Scripting

Clipbucket 2.6 - searchresult.php?query Cross-Site Scripting source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploitin...

Clipbucket 2.6 - 'groups.php?cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

Clipbucket 2.6 - 'view_collection.php?type' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...