CubeCart 3.0.x - Multiple Input Validation Vulnerabilities

CubeCart 3.0.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/19563/info CubeCart is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied...

LinksCaffe 3.0 - 'counter.php?tablewidth' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting

PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18898/info ATutor is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

Gphotos 1.41.5 - diapo.php?rep Cross-Site Scripting

Gphotos 1.41.5 - diapo.php?rep Cross-Site Scripting source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the...

Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing

source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date Cross-Site Scripting

Ocean12 Technologies Calendar Manager Pro 1.0 1 - adminmain.asp?date Cross-Site Scripting source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. The...

aWebNews 1.2 - 'visview.php?_GET['cid']' SQL Injection

source: https://www.securityfocus.com/bid/17352/info aWebBB is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Mantis Bug Tracker 0.x1.0 - view_all_set.php Multiple Cross-Site Scripting Vulnerabilities

Mantis Bug Tracker 0.x1.0 - viewallset.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are d...

aoblogger 2.3 - create.php Entry Creation

aoblogger 2.3 - create.php Entry Creation source: https://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

Dev Web Management System 1.5 - 'getfile.php?cat' SQL Injection

source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...

Bitweaver 1.1.1 - view_post.php?post_id Cross-Site Scripting

Bitweaver 1.1.1 - viewpost.php?postid Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

Bitweaver 1.1.1 - my.php?sort_mode Cross-Site Scripting

Bitweaver 1.1.1 - my.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

Bitweaver 1.1.1 - view.php?blog_id Cross-Site Scripting

Bitweaver 1.1.1 - view.php?blogid Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

EZDatabase 2.1.2 - index.php?p Local File Inclusion

EZDatabase 2.1.2 - index.php?p Local File Inclusion source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL...

EZDatabase 2.1.2 - index.php?db_id SQL Injection

EZDatabase 2.1.2 - index.php?dbid SQL Injection source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL...

QuickPayPro 3.1 - tracking.details.php?trackingid SQL Injection

QuickPayPro 3.1 - tracking.details.php?trackingid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Thwboard Beta 2.8 - 'v_profile.php?user' SQL Injection

source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input. A remote...