Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...

Pligg 1.0.4 - 'install1.php' Cross-Site Scripting Vulnerability

Pligg 1.0.4 'install1.php' Cross Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/41456/info Pligg is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue...

Wiki Web Help Cross Site Scripting and HTML Injection Vulnerabilities

Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code could run in the context of the affected...

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting

i-Net Solution Matrimonial Script 2.0.3 - alert.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41387/info i-Net Solution Matrimonial Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting source: https://www.securityfocus.com/bid/41396/info SocialABC NetworX is prone to an arbitrary file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize...

Bitweaver 2.7 - fImg Cross-Site Scripting

Bitweaver 2.7 - fImg Cross-Site Scripting source: https://www.securityfocus.com/bid/41421/info Bitweaver is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

NewsOffice 2.0.18 - 'news_show.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41419/info NewsOffice is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Orbis CMS 1.0.2 - 'editor-body.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41390/info Orbis CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

NewsOffice 2.0.18 - news_show.php Cross-Site Scripting

NewsOffice 2.0.18 - newsshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41419/info NewsOffice is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

phpFaber CMS 2.0.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41498/info PHPFABER CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities

FuseTalk 3.24.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42157/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Flatnux 2010-06.09 - 'find' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41282/info Flatnux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Flatnux 2010-06.09 - find Cross-Site Scripting

Flatnux 2010-06.09 - find Cross-Site Scripting source: https://www.securityfocus.com/bid/41282/info Flatnux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Grafik CMS - '/admin.php' SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41227/info Grafik CMS is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-base...

TornadoStore 1.4.3 - SQL Injection HTML Injection

TornadoStore 1.4.3 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/41233/info TornadoStore is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues t...

Grafik CMS - admin.php SQL Injection Cross-Site Scripting

Grafik CMS - admin.php SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41227/info Grafik CMS is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...

Ceica-GW - login.php Cross-Site Scripting

Ceica-GW - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40917/info Ceica-GW is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

AbleSpace 1.0 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/41139/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

Limny 2.1 - q Cross-Site Scripting

Limny 2.1 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/41152/info Limny is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22420 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site Scripti...