PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal

source: https://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit this condition to reveal the contents...

WebCalendar 0.9.45 - SQL Injection

source: https://www.securityfocus.com/bid/12581/info WebCalendar is affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 617-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 617-1 [email protected] http://www.debian.org/security/ Martin Schulze December 24th, 2004 http://www.debian.org/security/faq -...

DSA-617-1 libtiff - insufficient input validation

Bulletin has no description...

Nuked-klaN 1.x - Submit Link Function HTML Injection

Nuked-klaN 1.x - Submit Link Function HTML Injection source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the...

Phorum 5.0.11 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/14095/info Phoroum is prone to SQL injection attacks. Insufficient sanitization of user input may allow a malicious user to manipulate the structure and logic of database queries. Successful exploitation could allow the attacker to compromise security...

XOOPS viewtopic.php Multiple Parameter XSS

The weblinks module of XOOPS contains a file named 'viewtopic.php' in the '/modules/newbb' directory. The code of the module insufficently filters out user provided data. The URL parameter used by 'viewtopic.php' can be used to insert malicious HTML and/or JavaScript in to the web page...

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection source: https://www.securityfocus.com/bid/10772/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or...

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection

source: https://www.securityfocus.com/bid/10772/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This vulnerability exists due to insufficient...

CuteNews 1.3 - Comment HTML Injection

source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML...

Fresh Guest Book 1.0/2.x - HTML Injection

source: https://www.securityfocus.com/bid/9995/info It has been reported that Fresh Guest Book is prone to a remote HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied form input. An attacker may exploit the aforementioned...

eCommerce Corporation Online Store Kit 3.0 - shop.php?cat SQL Injection

eCommerce Corporation Online Store Kit 3.0 - shop.php?cat SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via t...

eCommerce Corporation Online Store Kit 3.0 - listing.php?id SQL Injection

eCommerce Corporation Online Store Kit 3.0 - listing.php?id SQL Injection source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via...

eCommerce Corporation Online Store Kit 3.0 - 'shop.php?cat' SQL Injection

source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a malicious user may influence database...

eCommerce Corporation Online Store Kit 3.0 - 'listing.php?id' SQL Injection

source: https://www.securityfocus.com/bid/9687/info It has been reported that Online Store Kit is prone to multiple SQL injection vulnerabilities. These issues arise due to insufficient sanitation of user-supplied input via the URI. As a result of this a malicious user may influence database...

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...

ShopCartCGI 2.3 - 'gotopage.cgi' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...

vBulletin 1.0/1.1/2.0.x/2.2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site scripting attacks. Upon...

PHP-Nuke 6.x7.0 News Module - Cross-Site Scripting

PHP-Nuke 6.x7.0 News Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/9605/info It has been reported that the PHP-Nuke module 'News' is prone to a cross-site scripting vulnerability. The issue arises due to the module failing to properly sanitize user-supplied information...