Easysitenetwork Jokes Complete Website - id Cross-Site Scripting

Easysitenetwork Jokes Complete Website - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Easysitenetwork Jokes Complete Website - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser...

Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptem[template] Remote File Inclusion

Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptemtemplate Remote File Inclusion source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

Xforum 1.4 - nbpageliste Cross-Site Scripting

Xforum 1.4 - nbpageliste Cross-Site Scripting source: https://www.securityfocus.com/bid/37818/info Xforum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Joomla! Component com_marketplace 1.2 - catid Cross-Site Scripting

Joomla! Component commarketplace 1.2 - catid Cross-Site Scripting source: https://www.securityfocus.com/bid/37819/info The Joomla! 'commarketplace' component is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

Tribisur - cat Cross-Site Scripting

Tribisur - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/37800/info Tribisur is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

GNU Bash 4.0 - 'ls' Control Character Command Injection

source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary commands in a bash terminal; other attacks may also be...

Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities

Layout CMS 1.0 SQL-Injection and Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/40415/info Layout CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...

Active Calendar 1.2 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37709/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection source: https://www.securityfocus.com/bid/37716/info Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary comman...

Orion Application Server 2.0.7 - 'Terminal Escape Sequence in Logs' Command Injection

source: https://www.securityfocus.com/bid/37717/info Orion Application Server is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Orion Application Serv...

Ulisses Scripts 2.6.1 - ladder.php SQL Injection

Ulisses Scripts 2.6.1 - ladder.php SQL Injection Tested on: Windows Vista Home Premium and Linux 2.6.28.1 Backtrack 3 ------------------------------ Ulisse's Scripts 2.6.1 ladder.php SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website:...

Ulisse's Scripts 2.6.1 SQL Injection

Exploit Title: Ulisse’s Scripts 2.6.1 ladder.php SQL Injection Vulnerability Date: January 6th, 2010 Author: Sora Version: 2.6.1 Tested on: Windows Vista Home Premium and Linux 2.6.28.1 Backtrack 3 —————————— Ulisse’s Scripts 2.6.1 ladder.php SQL Injection Vulnerability Author: Sora Contact:...

Calendarix 0.7 - calpath Remote File Inclusion

Calendarix 0.7 - calpath Remote File Inclusion source: https://www.securityfocus.com/bid/37673/info Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containi...

Joomla! Component DM Orders - id SQL Injection

Joomla! Component DM Orders - id SQL Injection source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Calendarix 0.7 - 'calpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/37673/info Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Roundcube Webmail 0.2 - Cross-Site Scripting

Roundcube Webmail 0.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

KubeLabs PHPDug 2.0 - 'upcoming.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40554/info KubeLabs PHPDug is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Roundcube Webmail 0.2 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37654/info RoundCube Webmail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...