glFusion 1.1.x1.2.1 - users.php SQL Injection

glFusion 1.1.x1.2.1 - users.php SQL Injection source: https://www.securityfocus.com/bid/46575/info glFusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

SurgeMail SurgeWeb Cross Site Scripting Vulnerability

SurgeMail is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities

Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

DSA-1870-1 pidgin - insufficient input sanitization

Bulletin has no description...

Debian DSA-1822-1 : mahara - insufficient input sanitization

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is prone to several cross-site scripting attacks, which allow an attacker to inject arbitrary HTML or script code and steal potential sensitive data from other users. The oldstable distribution etch does not contai...

FreeBSD Ports: phpMyAdmin, phpmyadmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Ohesa Emlak Portal 1.0 - satilik.asp?Kategori SQL Injection

Ohesa Emlak Portal 1.0 - satilik.asp?Kategori SQL Injection source: https://www.securityfocus.com/bid/25880/info Ohesa Emlak Portal is prone to multiple SQL-injection vulnerabilities because it fails to adequately sanitize user-supplied input before using it in an SQL query. A successful exploit...

Wabbit PHP Gallery 0.9 - Dir Directory Traversal

Wabbit PHP Gallery 0.9 - Dir Directory Traversal source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the...

PHP-Nuke Search Enhanced Module 1.12.0 - HTML Injection

PHP-Nuke Search Enhanced Module 1.12.0 - HTML Injection source: https://www.securityfocus.com/bid/15218/info Search Enhanced module for is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in...

PHPOutsourcing Zorum 3.5 - 'Prod.php' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/14601/info Zorum is prone to an arbitrary command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This issue may facilitate unauthorized remote access in the context of the Web server to...

PHPTB Topic Board 2.0 - file_o.php?absolutepath Remote File Inclusion

PHPTB Topic Board 2.0 - fileo.php?absolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execute...

PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal

source: https://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit this condition to reveal the contents...

WebCalendar 0.9.45 - SQL Injection

source: https://www.securityfocus.com/bid/12581/info WebCalendar is affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

Phorum 5.0.11 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/14095/info Phoroum is prone to SQL injection attacks. Insufficient sanitization of user input may allow a malicious user to manipulate the structure and logic of database queries. Successful exploitation could allow the attacker to compromise security...

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection source: https://www.securityfocus.com/bid/10772/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or...

NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection

source: https://www.securityfocus.com/bid/10772/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This vulnerability exists due to insufficient...

CuteNews 1.3 - Comment HTML Injection

source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not sufficiently sanitized of malicious HTML...

Fresh Guest Book 1.0/2.x - HTML Injection

source: https://www.securityfocus.com/bid/9995/info It has been reported that Fresh Guest Book is prone to a remote HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied form input. An attacker may exploit the aforementioned...

vBulletin 1.0/1.1/2.0.x/2.2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site scripting attacks. Upon...