Yak! Chat Client 2.x - FTP Server Directory Traversal

source: https://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can ultimately allow an attacker to compromise a computer...

FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities

FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of...

Go Smart Inc GoSmart Message Board - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/11361/info GoSmart Message Board is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting and SQL injection attacks. The cause of these issue is insufficient sanitization of...

Go Smart Inc GoSmart Message Board - Multiple Input Validation Vulnerabilities

Go Smart Inc GoSmart Message Board - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/11361/info GoSmart Message Board is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting and...

W-Agora 4.1.6a - 'login.php?loginuser' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL injection, cross-site scripting, a...

W-Agora 4.1.6 - 'a forgot_password.php?userid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL injection, cross-site scripting, a...

W-Agora 4.1.6 - 'a download_thread.php?thread' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL injection, cross-site scripting, a...

W-Agora 4.1.6 - a redir_url.php?key SQL Injection

W-Agora 4.1.6 - a redirurl.php?key SQL Injection source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to...

PD9 Software MegaBBS 2.02.1 - view-profile.asp Multiple SQL Injections

PD9 Software MegaBBS 2.02.1 - view-profile.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP...

PD9 Software MegaBBS 2.0/2.1 - 'thread-post.asp' Multiple Header CRLF Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

TUTOS - 'file_overview.php?link_id' SQL Injection

source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. These...

TUTOS - app_new.php?t Cross-Site Scripting

TUTOS - appnew.php?t Cross-Site Scripting source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site...

myserver 0.7 - Directory Traversal

myserver 0.7 - Directory Traversal source: https://www.securityfocus.com/bid/11189/info MyServer is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This vulnerability results in improper access to...

BBS E-Market Professional bf_130 1.3.0 - Multiple File Disclosure Vulnerabilities

BBS E-Market Professional bf130 1.3.0 - Multiple File Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/11191/info BBS E-Market Professional is reported prone to multiple file disclosure vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data....

eGroupWare 1.0 Calendar Module - 'date' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11013/info It is reported that eGroupWare is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. The cross-site scripting issues present themselves in the various parameters of the 'addressbook' and 'calendar' modules. It is...

Acme thttpd 2.0.7 - Directory Traversal

Acme thttpd 2.0.7 - Directory Traversal source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows...

PowerPortal 1.11.3 - Private Message HTML Injection

PowerPortal 1.11.3 - Private Message HTML Injection source: https://www.securityfocus.com/bid/10835/info A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private messag...

PowerPortal 1.1/1.3 - Private Message HTML Injection

source: https://www.securityfocus.com/bid/10835/info A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data. Specifically, when creating PowerPortal...

AntiBoard 0.60.7 - antiboard.php Multiple SQL Injections

AntiBoard 0.60.7 - antiboard.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a...

AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability. AntiBoard versions 0.7.2 a...