CVE-2021-24624

The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks...

uPhotoGallery 1.1 slideshow.asp ci Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Tagit! Tagit2b 2.1.B Build 2 - tagminwordfilter.php?Admin Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminwordfilter.php?Admin Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

Tagit! Tagit2b 2.1.B Build 2 - tagminban_watch.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminbanwatch.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues ma...