CVE-2011-4541: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Hastymail2 2.1.1 before RC2 allows remote attackers to inject arbitrary web script or HTML via the rs parameter in a mailbox Drafts action...

PT-2011-4999

Name of the Vulnerable Software and Affected Versions Joomla! Estate Agent com estateagent component affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a showEO action to...

PT-2011-4995

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 1.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the message parameter in a gv send action to "index.php". Recommendations For versions pri...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

PT-2011-4934

Name of the Vulnerable Software and Affected Versions Contao versions prior to 2.10.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to index.php in specific actions, such as teachers.html or teachers/. This can lead to cross-site scripting...

CVE-2011-4563: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other versions before 2.2.6 2011-09-23, allows remote attackers to inject arbitrary web script or HTML via the userpost parameter in a PM request, related to tinymce. NOTE: some of these details are obtained from...

CVE-2011-4559: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Calendar module in vTiger CRM 5.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the onlyforuser parameter in an index action to index.php...

CVE-2011-4335: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Contao before 2.10.2 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php in a 1 teachers.html or 2 teachers/ action...

PT-2011-4989

Name of the Vulnerable Software and Affected Versions Phorum version 5.2.18 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to admin/index.php. Recommendations For Phorum version...

PT-2011-4987

Name of the Vulnerable Software and Affected Versions vTiger CRM versions 5.2.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the onlyforuser parameter in an index action to the "index.php" endpoint. Recommendations For...

Hastymail 'rs' and 'rsargs[]' Parameters Remote Code Injection Vulnerabilities

The host is running Hastymail2 and is prone to remote code injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodhastymail2rsparamremotecodeinjvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ Hastymail 'rs' and 'rsargs' Parameters Remote Code Injection Vulnerabilities Authors: Sooraj KS...

CVE-2010-5051

Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...

Sql injection

SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5059

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via the album parameter in a photos action...

CVE-2010-5061

The CVE-2010-5061 entry describes a SQL injection vulnerability in RSStatic’s index.php, exploitable via the maxarticles parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to execute arbitrary SQL commands. Impact is described as partial confide...

PT-2011-1983

Name of the Vulnerable Software and Affected Versions JComments com jcomments component version 2.1.0.0 for Joomla! Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to...

PT-2011-1991

Name of the Vulnerable Software and Affected Versions com gbufacebook version 1.0.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the face id parameter in a show face action to the "index.php" endpoint. Recommendations For version...

PT-2011-1986

Name of the Vulnerable Software and Affected Versions razorCMS version 1.0 stable Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to...

PT-2011-1994

Name of the Vulnerable Software and Affected Versions CMScout version 2.0.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album parameter in a "photos" action in the index.php file. Recommendations For CMScout version 2.0.8, consider...

CVE-2010-5048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.jcomments.php in the JoomlaTune JComments comjcomments component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php...