MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion

source: https://www.securityfocus.com/bid/27097/info MODx is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the...

WebPortal CMS 'index.php' SQL Injection Vulnerability

WebPortal CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

InstantSoftwares Dating Site - Login SQL Injection

InstantSoftwares Dating Site - Login SQL Injection source: https://www.securityfocus.com/bid/27080/info InstantSoftwares Dating Site is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

LiveCart 1.0.1 - return Cross-Site Scripting (2)

LiveCart 1.0.1 - return Cross-Site Scripting 2 source: https://www.securityfocus.com/bid/27087/info LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...

MatPo.de Kontakt Formular 1.4 - function.php Remote File Inclusion

MatPo.de Kontakt Formular 1.4 - function.php Remote File Inclusion source: https://www.securityfocus.com/bid/27075/info Kontakt Formular is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

MatPo.de Kontakt Formular 1.4 - 'function.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27075/info Kontakt Formular is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks ar...

Makale Scripti - Cross-Site Scripting

source: https://www.securityfocus.com/bid/27067/info Makale Scripti is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Makale Scripti - Cross-Site Scripting

Makale Scripti - Cross-Site Scripting source: https://www.securityfocus.com/bid/27067/info Makale Scripti is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Agares Media ThemeSiteScript 1.0 - loadadminpage Remote File Inclusion

Agares Media ThemeSiteScript 1.0 - loadadminpage Remote File Inclusion source: https://www.securityfocus.com/bid/26998/info ThemeSiteScript is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

MyBlog 1.x - Games.php?ID Remote File Inclusion

MyBlog 1.x - Games.php?ID Remote File Inclusion source: https://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...

MyBlog 1.x - 'Games.php?ID' Remote File Inclusion

source: https://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

SiteScape Forum - dispatch.cgi Tcl Command Injection

SiteScape Forum - dispatch.cgi Tcl Command Injection source: https://www.securityfocus.com/bid/26963/info SiteScape Forum is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary commands in th...

Mambo 4.6.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Mambo 4.6.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Mambo 4.6.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26922/info Mambo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

phPay 2.2.1 - Windows Installations Local File Inclusion

phPay 2.2.1 - Windows Installations Local File Inclusion source: https://www.securityfocus.com/bid/26881/info phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against...

webSPELL 4.1.2 - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26787/info webSPELL is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

E-Xoops 1.0.51.0.8 - modulesbannersclick.php?bid SQL Injection

E-Xoops 1.0.51.0.8 - modulesbannersclick.php?bid SQL Injection source: https://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues coul...

webSPELL 4.1.2 - usergallery.php?galleryID Cross-Site Scripting

webSPELL 4.1.2 - usergallery.php?galleryID Cross-Site Scripting source: https://www.securityfocus.com/bid/26787/info webSPELL is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26891/info Flyspray is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities

Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26891/info Flyspray is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...