PT-2014-2480

Name of the Vulnerable Software and Affected Versions glFusion versions prior to 1.2.2.pl4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via various parameters, including subject in profiles.php, address1, address2, calendar type, city,...

CVE-2013-1466: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in glFusion before 1.2.2.pl4 allow remote attackers to inject arbitrary web script or HTML via the 1 subject parameter to profiles.php; 2 address1, 3 address2, 4 calendartype, 5 city, 6 state, 7 title, 8 url, or 9 zipcode parameter to...

CVE-2006-3996: Undefined Security Weakness

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the 1 desc or 2 asc parameters...

CVE-2005-4719: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in knowledgebase/index.php, 2 the aid parameter in knowledgebase/view.php, 3 the cid parameter in contact/update.php, 4 the letter...