IBM Rational ClearQuest 7.0 - Multiple Cross-Site Scripting Vulnerabilities

IBM Rational ClearQuest 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28296/info IBM Rational ClearQuest is prone to multiple cross-site scripting vulnerabilities because it fails to adequately sanitize user-supplied input. An attacker could exploit...

Cfnetgs 0.24 - index.php Cross-Site Scripting

Cfnetgs 0.24 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28267/info Cfnetgs is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this iss...

RSA WebID 5.3 - IISWebAgentIF.dll Cross-Site Scripting

RSA WebID 5.3 - IISWebAgentIF.dll Cross-Site Scripting source: https://www.securityfocus.com/bid/28277/info RSA WebID is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

EasyImageCatalogue 1.31 - index.php Multiple Cross-Site Scripting Vulnerabilities

EasyImageCatalogue 1.31 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacke...

EasyImageCatalogue 1.31 - 'addcomment.php?d' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

EasyImageCatalogue 1.31 - addcomment.php?d Cross-Site Scripting

EasyImageCatalogue 1.31 - addcomment.php?d Cross-Site Scripting source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

EasyImageCatalogue 1.31 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28164/info onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Acyhost - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28231/info Acyhost is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

PHP-Nuke zClassifieds Module - cat SQL Injection

PHP-Nuke zClassifieds Module - cat SQL Injection source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

PHP-Nuke NukeC30 3.0 Module - id_catg SQL Injection

PHP-Nuke NukeC30 3.0 Module - idcatg SQL Injection source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Mambo Component ensenanzas - id SQL Injection

Joomla! Mambo Component ensenanzas - id SQL Injection source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection

source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting

EncapsGallery 1.11.2 - watermark.php?File Cross-Site Scripting source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

EncapsGallery 1.11.2 - 'watermark.php?File' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28178/info EncapsGallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting

WordPress 2.3.2 - wp-admininvites.php?to Cross-Site Scripting source: https://www.securityfocus.com/bid/28139/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ImageVue 1.7 - dir2.php?path Cross-Site Scripting

ImageVue 1.7 - dir2.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ImageVue 1.7 - upload.php?path Cross-Site Scripting

ImageVue 1.7 - upload.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28138/info Imagevue is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...