Joomla! Component com_tree - key SQL Injection

Joomla! Component comtree - key SQL Injection source: https://www.securityfocus.com/bid/50041/info The 'comtree' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

Joomla! Component com_br - 'state_id' SQL Injection

source: https://www.securityfocus.com/bid/50042/info The 'combr' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_tree - 'key' SQL Injection

source: https://www.securityfocus.com/bid/50041/info The 'comtree' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component com_shop - id SQL Injection

Joomla! Component comshop - id SQL Injection source: https://www.securityfocus.com/bid/50043/info The 'comshop' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Novell GroupWise WebAccess Directory.Item Parameters XSS

The version of Novell GroupWise installed on the remote Windows host is earlier than 8.0.2 HP3. It is, therefore, reportedly affected by a cross-site scripting vulnerability because the application fails to sanitize user-supplied input to the 'Directory.Item.name' and 'Directory.Item.displayName'...

Vtiger CRM <= 5.2.1 Multiple XSS Vulnerabilities - Active Check

Vtiger CRM is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities (1)

vTiger CRM 5.2.1 - index.php Multiple Cross-Site Scripting Vulnerabilities 1 source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

vTiger CRM 5.2.1 - PHPrint.php Multiple Cross-Site Scripting Vulnerabilities

vTiger CRM 5.2.1 - PHPrint.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

Phorum 5.2.18 - '/admin/index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49920/info Phorum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

ContaoCMS 2.10.1 - Cross-Site Scripting

ContaoCMS 2.10.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/50061/info Contao is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ProjectForum 7.0.1 3038 - more Object HTML Injection

ProjectForum 7.0.1 3038 - more Object HTML Injection source: https://www.securityfocus.com/bid/49895/info ProjectForum is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Theme RedLine 1.65 - s Cross-Site Scripting

WordPress Theme RedLine 1.65 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/49880/info The RedLine theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Plugin WP Bannerize 2.8.7 - ajax_sorter.php SQL Injection

WordPress Plugin WP Bannerize 2.8.7 - ajaxsorter.php SQL Injection source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

WordPress Theme Morning Coffee 3.5 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49878/info The Morning Coffee theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Theme RedLine 1.65 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49880/info The RedLine theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

ProjectForum 7.0.1 3038 - 'more' Object HTML Injection

source: https://www.securityfocus.com/bid/49895/info ProjectForum is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

WordPress Plugin WP Bannerize 2.8.7 - 'ajax_sorter.php' SQL Injection

source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WordPress Theme Atahualpa 3.6.7 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49865/info The Atahualpa theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

WordPress Theme Atahualpa 3.6.7 - s Cross-Site Scripting

WordPress Theme Atahualpa 3.6.7 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/49865/info The Atahualpa theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

WordPress Theme Pixiv Custom Theme 2.1.5 - 'cpage' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49875/info The Pixiv Custom theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...