RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...

projectBB0451.txt

Sorry it's in French but i don't have the time to translate... It has been published on SecurityTracker to for people who can't read French. Logiciel: ProjectBB v0.4.5.1 Auteur: Benjilenoob E-mail: [email protected] !-------------------! ! II. XSS ! !-------------------!...

phpHeaven phpMyChat 0.14.5 - 'admin.php3' Arbitrary File Access

source: https://www.securityfocus.com/bid/10556/info phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The following specific issues can affect the application: phpMyChat is prone to a HTML...

TikiWiki Project 1.8 - imgwiki_up Arbitrary File Upload

TikiWiki Project 1.8 - imgwikiup Arbitrary File Upload source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure,...

TikiWiki Project 1.8 - 'tiki-upload_file.php?galleryID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

Maxwebportal 1.3x - 'down.asp' HTTP_REFERER Cross-Site Scripting

source: https://www.securityfocus.com/bid/9625/info It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection. MaxWebPortal versions...

ttCMS 2.2 Multiple Vulnerabilities

The remote server is running a version of ttCMS that is prone to code injection as well as SQL injection attacks. An attacker may use these flaws to execute arbitrary PHP code on this host or to take the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...