Rapid Classified 3.1 - view_print.asp Cross-Site Scripting

Rapid Classified 3.1 - viewprint.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly saniti...

Vikingboard 0.1.2 - admin.php?act Traversal Arbitrary File Access

Vikingboard 0.1.2 - admin.php?act Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/21196/info Vikingboard is prone to multiple HTML-injection vulnerabilities and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data...

vSpin Classified System 2004 - search.asp Multiple SQL Injections

vSpin Classified System 2004 - search.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to...

Grandora Rialto 1.6 - searchmain.asp?cat Cross-Site Scripting

Grandora Rialto 1.6 - searchmain.asp?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplie...

BirdBlog 1.4 - adminlogs.php?page Cross-Site Scripting

BirdBlog 1.4 - adminlogs.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Rapid Classified 3.1 - reply.asp Cross-Site Scripting

Rapid Classified 3.1 - reply.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize...

Enthrallweb eHomes - 'result.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21193/info eHome is prone to multiple input-validation vulnerabilities, including cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Link CMS - navigacija.php?IDMeniGlavni SQL Injection

Link CMS - navigacija.php?IDMeniGlavni SQL Injection source: https://www.securityfocus.com/bid/21464/info Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data...

Link CMS - 'prikazInformacije.php?IDStranicaPodaci' SQL Injection

source: https://www.securityfocus.com/bid/21464/info Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21173/info BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...

ActiveNews Manager - articleId SQL Injection (2)

ActiveNews Manager - articleId SQL Injection 2 source: https://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied...

b2evolution 1.8.21.9 - _404_not_found.page.php Multiple Cross-Site Scripting Vulnerabilities

b2evolution 1.8.21.9 - 404notfound.page.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

Odysseus Blog 1.0 - blog.php Cross-Site Scripting

Odysseus Blog 1.0 - blog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21128/info Odysseus Blog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities

Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21129/info Sphpblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because th...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

BlogTorrent Preview 0.92 - 'Announce.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21125/info BlogTorrent Preview is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

b2evolution 1.8.2/1.9 - '_referer_spam.page.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...