CVE-2004-2655: Undefined Security Weakness

rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen...

MAXDEV CMS 1.0.72/1.0.73 - 'PNuserapi.php' SQL Injection

source: https://www.securityfocus.com/bid/17399/info MAXDEV CMS is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Bugzero 4.3.1 - query.jsp?msg Cross-Site Scripting

Bugzero 4.3.1 - query.jsp?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/17351/info Bugzero is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

HP Color LaserJet 2500/4600 Toolbox - Directory Traversal

source: https://www.securityfocus.com/bid/17367/info The HP Color LaserJet 2500/4600 Toolbox is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

SoftBiz Image Gallery - 'images.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/17339/info Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...

Zdaemon 1.8.1 - Multiple Vulnerabilities

Zdaemon 1.8.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/17340/info ZDaemon is prone to multiple remote vulnerabilities. A buffer overflow vulnerability exists in the 'isclientwadok' function. A remote denial of service condition also affects the server. ZDaemon 1.08.01...

Blank'N'Berg 0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/17346/info Blank'N'Berg is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser...

SoftBiz Image Gallery - mage_desc.php Multiple SQL Injections

SoftBiz Image Gallery - magedesc.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17339/info Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...

SiteSearch Indexer 3.5 - searchresults.asp Cross-Site Scripting

SiteSearch Indexer 3.5 - searchresults.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/17332/info SiteSearch Indexer is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

MediaSlash Gallery - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17323/info MediaSlash Gallery is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

PhxContacts 0.93 - login.php Cross-Site Scripting

PhxContacts 0.93 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17307/info PhxContacts is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

PHPCOIN 1.2 - mod.php?fs Cross-Site Scripting

PHPCOIN 1.2 - mod.php?fs Cross-Site Scripting source: https://www.securityfocus.com/bid/17279/info phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue...

Maian Weblog 2.0 - 'print.php' SQL Injection

source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQL logic into the vulnerable...

Pixel Motion - adminindex.php Multiple SQL Injections

Pixel Motion - adminindex.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Pixel Motion - '/admin/index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17260/info Pixel Motion is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

RCBlog post Parameter Directory Traversal Vulnerability

The remote version of RCBlog fails to sanitize user-supplied input to the SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Micro Focus / HP / HPE (OpenView Storage) Data Protector Detection (TCP)

TCP based detection of Mirco Focus / HP / HPE OpenView Storage Data Protector. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav SPDX-FileCopyrightText: Detection methodology got largely rewritten by Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

Edgewall Software Trac SQL injection flaw

The remote version of Trac is prone to a SQL injection flaw through the ticket query module due to SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Phorum < 5.0.18 XSS Vulnerability

Phorum contains a script called SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phorum:phorum"; ifdescription...

MailGust SQL Injection Vulnerability

A vulnerability was identified in MailGust, which may be exploited by remote attackers to execute arbitrary SQL commands. SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...