PHPFreeChat 1.1 - 'demo21_with_hardocded_urls.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30292/info phpFreeChat is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

GL-SH Deaf Forum 6.5.5 - Cross-Site Scripting Arbitrary File Upload

GL-SH Deaf Forum 6.5.5 - Cross-Site Scripting Arbitrary File Upload source: https://www.securityfocus.com/bid/29849/info GL-SH Deaf Forum is prone to a cross-site scripting vulnerability and an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An...

GL-SH Deaf Forum 6.5.5 - Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/29849/info GL-SH Deaf Forum is prone to a cross-site scripting vulnerability and an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issue to execute arbitrary...

OpenDocMan 1.x - out.php Cross-Site Scripting

OpenDocMan 1.x - out.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29765/info OpenDocMan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

PHPInstantGallery 2.0 - 'index.php?Gallery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29152/info phpInstantGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...

GEDCOM_TO_MYSQL - '/PHP/prenom.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29048/info GEDCOMtoMySQL2 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Zen Cart 2008 - index.php?keyword Cross-Site Scripting

Zen Cart 2008 - index.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/29020/info Zen Cart is prone to a cross-site scripting vulnerability and an SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

MJGUEST 6.7 - 'QT 'mjguest.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29002/info MJGUEST is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

Joomla! Component Visites 1.1 - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/28942/info The Visites component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue m...

IBM Lotus Expeditor 6.1 - URI Handler Command Execution

IBM Lotus Expeditor 6.1 - URI Handler Command Execution source: https://www.securityfocus.com/bid/28926/info IBM Lotus Expeditor is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitra...

PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection

source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

RSA Authentication Agent for Web 5.3 - Open Redirection

source: https://www.securityfocus.com/bid/28907/info RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input. A successful attack may aid in phishing-style attacks. This issue affects RSA...

PortailPHP 2.0 - 'mod_search' Remote File Inclusion

source: https://www.securityfocus.com/bid/28867/info PortailPHP is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the conte...

Poplar Gedcom Viewer 2.0 - Search Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28608/info Poplar Gedcom Viewer is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

@lex Poll 1.2 - setup.php Cross-Site Scripting

@lex Poll 1.2 - setup.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28520/info @lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

PHPGKit 0.9 - 'connexion.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28526/info PhpGKit is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the...

@lex Poll 1.2 - 'setup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28520/info @lex Poll is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28446/info The PJIRC module for phpBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local...

IBM Rational ClearQuest 7.0 - Multiple Cross-Site Scripting Vulnerabilities

IBM Rational ClearQuest 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28296/info IBM Rational ClearQuest is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input. An attacker could exploit...

Acyhost - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28231/info Acyhost is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...