Joomla! and Mambo 'com_asortyment' Component - 'katid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

Joomla! 'com_aml_2' Component 'art' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38914/info The 'comaml2' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

IBM Lotus Notes 6.5.6 'names.nsf' Open Redirection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38852/info IBM Lotus Notes is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

DataLife Engine 8.3 engine/inc/include/init.php selected_language Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...

CartWIZ 1.10 Login.ASP Message Argument Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13341/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

Satel Lite Satellite.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information and to execute...

ZyWALL 100 HTTP Referer Header - Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29110/info ZyWALL 100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! and Mambo com_iomezun Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27748/info The Joomla! and Mambo 'comiomezun' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Zainu 2.0 - SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15579/info Zainu is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

ASPBB 0.5.2 Perform_search.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18146/info ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Softbiz Classifieds Script advertisers/signinform.php msg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/32569/info Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary scri...

PHPTreeView 1.0 TreeViewClass.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20764/info PHPTreeview is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

PHPFaber TopSites 3 Admin/Index.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23419/info TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...

cPanel WebHost Manager 3.1 editzone domain Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute i...

MG2 'list' Parameter - Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28098/info MG2 is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

DigiDomain 2.2 - suggest_result.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/28475/info DigiDomain is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Skype Technologies Skype 1.5 NSRunAlertPanel Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing functio...

4Images 1.7 Details.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20488/info 4images is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser o...

BMForum 5.6 - newtem/footer/bsd01footer.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...

Calcium 3.10/4.0.4 'Calcium40.pl' - Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29411/info Calcium is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...