Card sharj 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Zikula Application Framework 1.2.7/1.3 - 'themename' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49491/info Zikula Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Zikula Application Framework 1.2.71.3 - themename Cross-Site Scripting

Zikula Application Framework 1.2.71.3 - themename Cross-Site Scripting source: https://www.securityfocus.com/bid/49491/info Zikula Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this iss...

Mambo Component Ahsshop - SQL Injection

Mambo Component Ahsshop - SQL Injection source: https://www.securityfocus.com/bid/49419/info The Mambo CMS AHS Shop component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...

KaiBB 2.0.1 - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/49421/info KaiBB is prone to multiple SQL-injection vulnerabilities and a arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application, execute arbitrary...

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/49421/info KaiBB is prone to multiple SQL-injection vulnerabilities and a arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacke...

Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/49207/info Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

HESK Multiple Cross Site Scripting Vulnerabilities

HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. OpenVAS Vulnerability Test $Id: gbhesk49008.nasl 7006 2017-08-25 11:51:20Z teissa $ HESK Multiple Cross Site Scripting Vulnerabilities Authors: Michael Meyer Copyright:...

OpenEMR Multiple Cross Site Scripting Vulnerabilities

OpenEMR is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities

OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49090/info OpenEMR is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

Search Network 2.0 - query Cross-Site Scripting

Search Network 2.0 - query Cross-Site Scripting source: https://www.securityfocus.com/bid/49064/info Search Network is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49008/info HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

BESNI OKUL PORTAL - 'sayfa.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48969/info BESNI OKUL PORTAL is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities

Curverider Elgg 1.7.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48946/info Curverider Elgg is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues ...

BlueSoft Social Networking CMS - SQL Injection

BlueSoft Social Networking CMS - SQL Injection source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48546/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities

Flatpress 0.1010.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48482/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execut...

Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info http://www.noticeboardpro.com/notice-board-pro-copyright.htmlJoomla CCBoard is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could all...

Multiple WordPress WooThemes Themes - 'test.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48110/info Multiple WordPress WooThemes Live Wire are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Kentico CMS 5.5R2.23 - 'userContextMenu_Parameter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48051/info Kentico CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...