AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability. AntiBoard versions 0.7.2 a...

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Arbitrary File Access

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Arbitrary File Access source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on us...

RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Arbitrary File Access

source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters. A remote attacker may exploit this...

RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay

source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user supplied URI parameters. A remote attacker may exploit this...

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Open Proxy Relay

RiSearch 0.99 RiSearch Pro 3.2.6 - show.pl Open Proxy Relay source: https://www.securityfocus.com/bid/10812/info RiSearch and RiSearch Pro are reported prone to an open proxy vulnerability. It is reported that the issue presents itself due to a lack of sufficient sanitization performed on user...

EasyWeb 1.0 FileManager Module - Directory Traversal

source: https://www.securityfocus.com/bid/10792/info EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a request to the 'ewfilemanager' script for a file containin...

EasyWeb 1.0 FileManager Module - Directory Traversal

EasyWeb 1.0 FileManager Module - Directory Traversal source: https://www.securityfocus.com/bid/10792/info EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a reque...

Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection

source: https://www.securityfocus.com/bid/10771/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This issue exists due to insufficient...

British National Corpus SARA - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/10984/info sarad is reported prone to a buffer overflow vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can trigger the overflow condition by supplying a large string value to the...

CuteNews 1.3 - Comment HTML Injection

CuteNews 1.3 - Comment HTML Injection source: https://www.securityfocus.com/bid/10750/info CutePHP is reported prone to an HTML injection vulnerability. The vulnerability exists due to insufficient sanitization of user-supplied input. Specifically, user-supplied input to comment posts are not...

clearswift MIMEsweeper for Web 4.0/5.0 - Directory Traversal

source: https://www.securityfocus.com/bid/10918/info Clearswift MIMEsweeper For Web is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. To carry out an attack an attacker may specify a relative path to a target file in a GET request to...

Fastream NETFile FTPWeb Server 6.56.7 - Directory Traversal

Fastream NETFile FTPWeb Server 6.56.7 - Directory Traversal source: https://www.securityfocus.com/bid/10658/info The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view,...

Fastream NETFile FTP/Web Server 6.5/6.7 - Directory Traversal

source: https://www.securityfocus.com/bid/10658/info The NetFile FTP/Web Server is reported prone to a directory traversal vulnerability due to insufficient sanitization of user-supplied data. This can allow an attacker to create, view, and delete arbitrary files outside the web root. Fastream...

Rlpr 2.0 - msg() Multiple Vulnerabilities

Rlpr 2.0 - msg Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10578/info It is reported that rlpr is prone to multiple vulnerabilities. These vulnerabilities can allow a remote attacker to execute arbitrary code in order to gain unauthorized access. The application is affected...

Invision Power Board (IP.Board) 1.3 - SSI.php Cross-Site Scripting

Invision Power Board IP.Board 1.3 - SSI.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10539/info Invision Power Board 'ssi.php' script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by...

Invision Power Board (IP.Board) 1.3 - 'SSI.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10539/info Invision Power Board 'ssi.php' script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the 'ssi.php' script on user-influenced 'f' parameter. Th...

AspDotNetStorefront 3.3 - ReturnURL Cross-Site Scripting

AspDotNetStorefront 3.3 - ReturnURL Cross-Site Scripting source: https://www.securityfocus.com/bid/10507/info AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the...

AspDotNetStorefront 3.3 - 'ReturnURL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10507/info AspDotNetStorefront is prone to a cross-site scripting vulnerability. This issue exists due to insufficient sanitization of user-supplied data. The problem presents itself in the 'returnurl' parameter of the 'signin.aspx' script of the...

NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Login Form Cross-Site Scripting

source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks. SurgeMail versions...

NetWin Surgemail 1.8/1.9/2.0 / WebMail 3.1 - Error Message Full Path Disclosure

source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site scripting attacks. SurgeMail versions...