656 matches found
Flatnux 2010-06.09 - find Cross-Site Scripting
Flatnux 2010-06.09 - find Cross-Site Scripting source: https://www.securityfocus.com/bid/41282/info Flatnux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...
Grafik CMS - '/admin.php' SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/41227/info Grafik CMS is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-base...
BoastMachine 3.1 - key Cross-Site Scripting
BoastMachine 3.1 - key Cross-Site Scripting source: https://www.securityfocus.com/bid/40623/info boastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this...
nginx Space String Remote Source Code Disclosure Vulnerability
nginx is prone to a remote source code-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects nginx...
GR Board 1.8.6 - page.php Remote File Inclusion
GR Board 1.8.6 - page.php Remote File Inclusion source: https://www.securityfocus.com/bid/40437/info GR Board is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application an...
Caucho Resin Professional 3.1.5 - '/resin-admin/digest.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/40251/info Caucho Resin Professional is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of...
Joomla! Component Percha Fields Attach 1.0 - 'Controller' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...
gpEasy CMS 1.6.2 - 'editing_files.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40330/info gpEasy CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
WebMaid CMS Multiple Remote and Local File Include Vulnerabilities
WebMaid CMS is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer or in a remote location with the...
eFront 3.5.5 - langname Local File Inclusion
eFront 3.5.5 - langname Local File Inclusion source: https://www.securityfocus.com/bid/38787/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...
CH-CMS.ch 2 - Multiple Arbitrary File Upload Vulnerabilities
source: https://www.securityfocus.com/bid/39888/info CH-CMS.ch is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver...
phpCOIN 1.2.1 - mod Local File Inclusion
phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...
BBSXP 2008 - ShowPost.asp Cross-Site Scripting
BBSXP 2008 - ShowPost.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/38542/info BBSXP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...
OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions
OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to...
WampServer 2.0i - lang Cross-Site Scripting
WampServer 2.0i - lang Cross-Site Scripting source: https://www.securityfocus.com/bid/38357/info WampServer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...
PortWise SSL VPN 4.6 - reloadFrame Cross-Site Scripting
PortWise SSL VPN 4.6 - reloadFrame Cross-Site Scripting source: https://www.securityfocus.com/bid/38308/info PortWise SSL VPN is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptem[template] Remote File Inclusion
Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptemtemplate Remote File Inclusion source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...
Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities
Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/40415/info Layout CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...
Active Calendar 1.2 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37709/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting
Joomla! Component MS Comment 0.8.0b - Security Bypass Cross-Site Scripting source: https://www.securityfocus.com/bid/38250/info The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone t...