BMForum 3.0 - 'announcesys.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14396/info BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execute...

Comersus Open Technologies Comersus Cart 6.0.41 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/14183/info Comersus Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise...

MyGuestbook 0.6.1 - Form.Inc.php3 Remote File Inclusion

MyGuestbook 0.6.1 - Form.Inc.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/14155/info MyGuestbook is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue...

MyGuestbook 0.6.1 - 'Form.Inc.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/14155/info MyGuestbook is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an...

EasyPHPCalendar 6.1.5/6.2.x - 'datePicker.php?serverPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14131/info EasyPHPCalendar is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-si...

ATutor 1.4.3 - send_message.php?l Cross-Site Scripting

ATutor 1.4.3 - sendmessage.php?l Cross-Site Scripting source: https://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any ...

YaPiG 0.9x - LocalRemote File Inclusion

YaPiG 0.9x - LocalRemote File Inclusion source: https://www.securityfocus.com/bid/13874/info YaPiG is affected by remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

Shop-Script - ProductID SQL Injection

Shop-Script - ProductID SQL Injection source: https://www.securityfocus.com/bid/13635/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

OpenBB 1.0.8 - member.php Cross-Site Scripting

OpenBB 1.0.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Apple Terminal fails to properly sanitize input for "x-man-page" URI

Overview Apple Terminal on Mac OS X fails to sanitize x-man-page URIs, allowing an attacker to execute arbitrary commands. Description Mac OS X 10.3 includes a URI handler called x-man-page. It causes Apple Terminal to display a man page by using a URI of this form: x-man-page://command...

MidiCart PHP - 'Item_Show.php?Code_No' SQL Injection

source: https://www.securityfocus.com/bid/13515/info MidiCart PHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CodetoSell ViArt Shop Enterprise 2.1.6 - products.php Multiple Cross-Site Scripting Vulnerabilities

CodetoSell ViArt Shop Enterprise 2.1.6 - products.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application...

CityPost Simple PHP Upload - 'Simple-upload-53.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13261/info CityPost Simple PHP Upload is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'simple-upload-53.php' script. An attacker may leverage this issue...

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generat...

VoteBox 2.0 - Votebox.php Remote File Inclusion

VoteBox 2.0 - Votebox.php Remote File Inclusion source: https://www.securityfocus.com/bid/12806/info It is reported that VoteBox is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input to the 'votebox.ph...

Security Update For Exchange Server 2013 CU11 (KB3124557)

This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow spoofing if Outlook Web Access OWA fails to properly handle web requests, and sanitize user input and email content...