TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54235/info TEMENOS T24 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities

TEMENOS T24 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/54235/info TEMENOS T24 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

PHP-Fusion Advanced MP3 Player Infusion - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54228/info PHP-Fusion Advanced MP3 Player Infusion is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerabilit...

Metropolis Technologies OfficeWatch Directory Traversal Vulnerability

Metropolis Technologies OfficeWatch is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

DigPHP - 'dig.php' Script Remote File Disclosure

source: https://www.securityfocus.com/bid/54207/info DigPHP is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in furth...

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload

Drupal Module Drag Drop Gallery 6.x-1.5 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54179/info Drag & Drop Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

Drupal Module Drag & Drop Gallery 6.x-1.5 - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54179/info Drag & Drop Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrar...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Commentics - index.php Cross-Site Scripting

Commentics - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54111/info Commentics is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CMS Balitbang - Multiple HTML Injection Cross-Site Scripting Vulnerabilities

CMS Balitbang - Multiple HTML Injection Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/54084/info CMS Balitbang is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will...

e107 Image Gallery Plugin - name Remote File Disclosure

e107 Image Gallery Plugin - name Remote File Disclosure source: https://www.securityfocus.com/bid/54096/info The Image Gallery Plugin for e107 is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability t...

CMS Balitbang - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54084/info CMS Balitbang is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

e107 Hupsi_fancybox Plugin - Uploadify.php Arbitrary File Upload

e107 Hupsifancybox Plugin - Uploadify.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54091/info The Hupsifancybox Plugin for e107 is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to...

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure source: https://www.securityfocus.com/bid/54058/info Wp-ImageZoom for WordPress is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Multiple WordPress Themes - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54052/info Multiple Themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to uploa...

Multiple WordPress Themes - upload.php Arbitrary File Upload

Multiple WordPress Themes - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54052/info Multiple Themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-suppli...

WordPress Plugin Wp-ImageZoom - 'file' Remote File Disclosure

source: https://www.securityfocus.com/bid/54058/info Wp-ImageZoom for WordPress is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process,...

MediaWiki 1.x - 'uselang' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Funeral Script PHP - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/54402/info Funeral Script PHP is prone to multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker ...