PHP Invoice 2.2 - home.php Cross-Site Scripting

PHP Invoice 2.2 - home.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...

Phoenix Evolution CMS - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20212/info Phoenix Evolution CMS is prone to multiple cross-site scripting vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

vBulletin 2.3.x - global.php SQL Injection

vBulletin 2.3.x - global.php SQL Injection source: https://www.securityfocus.com/bid/20214/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

dokuwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the "w" and "h" parameters in lib/exec/fetch.php is not properly sanitised before being...

CubeCart 3.0.x - '/admin/image.php?image' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

Exporia 0.3 - Common.php Remote File Inclusion

Exporia 0.3 - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/20205/info Exporia is prone to a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the...

Opial AV Download Management 1.0 - index.php Cross-Site Scripting

Opial AV Download Management 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20174/info Opial Audio/Visual Download Management is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may levera...

PHP_news 2.0 - user_user.php?language Remote File Inclusion

PHPnews 2.0 - useruser.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...

BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

BirdBlog 1.x - 'index.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

My-BIC 0.6.5 - 'Mybic_Server.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...

Photostore - 'details.php?gid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20172/info Photostore is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

Plain Old WebServer 0.0.70.0.8 Firefox Extension - Directory Traversal

Plain Old WebServer 0.0.70.0.8 Firefox Extension - Directory Traversal source: https://www.securityfocus.com/bid/22502/info Plain Old Webserver is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an...

Back-End CMS 0.4.5 - search.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - search.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...

Photostore - 'view_photog.php?photogid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20172/info Photostore is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

My-BIC 0.6.5 - Mybic_Server.php Remote File Inclusion

My-BIC 0.6.5 - MybicServer.php Remote File Inclusion source: https://www.securityfocus.com/bid/20208/info My-BIC is prone to a remote file-include vulnerability because these applications fail to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise...

PHP_news 2.0 - creat_news_all.php?language Remote File Inclusion

PHPnews 2.0 - creatnewsall.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...

ToendaCMS 1.0.4 - Media.php Directory Traversal

ToendaCMS 1.0.4 - Media.php Directory Traversal source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive...

Jamroom 3.0.16 - login.php Cross-Site Scripting

Jamroom 3.0.16 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20162/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

CakePHP 1.1.7.3363 - 'Vendors.php' Directory Traversal

source: https://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...