TUTOS < 1.1.20040412 Multiple Input Validation Issues

The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...

TUTOS - 'app_new.php?t' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. These...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...

myServer 0.6.2 - 'math_sum.mscgi' Multiple Remote Overflows

source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI input. An attacker could exploit t...

MyServer 0.6.2 - math_sum.mscgi Multiple Cross-Site Scripting Vulnerabilities

MyServer 0.6.2 - mathsum.mscgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a...

PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities

PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuk...

[UNIX] P4DB Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Adam Webb NukeJokes 1.72.0 Module - modules.php?jokeid SQL Injection

Adam Webb NukeJokes 1.72.0 Module - modules.php?jokeid SQL Injection source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly...

Adam Webb NukeJokes 1.72.0 Module - Multiple Cross-Site Scripting Vulnerabilities

Adam Webb NukeJokes 1.72.0 Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to...

Adam Webb NukeJokes 1.7/2.0 Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. Multiple SQL injection issues exists du...

Coppermine Photo Gallery 1.2.0 RC4 - init.inc.php Remote File Inclusion

Coppermine Photo Gallery 1.2.0 RC4 - init.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because t...

Coppermine Photo Gallery 1.2.0 RC4 - 'init.inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly sanitize and validate user-supplied inp...

Coppermine Photo Gallery 1.2.2b - 'theme.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly sanitize and validate user-supplied inp...

OpenBB 1.0.x - post.php Multiple SQL Injections

OpenBB 1.0.x - post.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The S...

OpenBB 1.0.x - member.php?redirect Cross-Site Scripting

OpenBB 1.0.x - member.php?redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user inpu...

OpenBB 1.0.x - 'member.php?redirect' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

OpenBB 1.0.x - post.php?TID Cross-Site Scripting

OpenBB 1.0.x - post.php?TID Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...

OpenBB 1.0.x - myhome.php?to Cross-Site Scripting

OpenBB 1.0.x - myhome.php?to Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...

OpenBB 1.0.x - member.php Multiple SQL Injections

OpenBB 1.0.x - member.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...

phpBugTracker 0.9 - bug.php Multiple Cross-Site Scripting Vulnerabilities

phpBugTracker 0.9 - bug.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These...