phpMyChat 0.14.5 - chatdeluser.php3?LIMIT Cross-Site Scripting

phpMyChat 0.14.5 - chatdeluser.php3?LIMIT Cross-Site Scripting source: https://www.securityfocus.com/bid/26698/info phpMyChat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Ossigeno CMS 2.2_pre1 - ossigeno_modulesossigeno-catalogoxaxossigenocatalogocommon.php?ossigeno Remote File Inclusion

Ossigeno CMS 2.2pre1 - ossigenomodulesossigeno-catalogoxaxossigenocatalogocommon.php?ossigeno Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied...

F5 Networks FirePass 4100 SSL VPN - My.Logon.php3 Cross-Site Scripting

F5 Networks FirePass 4100 SSL VPN - My.Logon.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/26659/info F5 Networks FirePass 4100 SSL VPN devices are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may...

Ossigeno CMS 2.2_pre1 - uploadxaxadminmodulesuninstall_module.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxadminmodulesuninstallmodule.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Ossigeno CMS 2.2_pre1 - uploadxaxadminpatchindex.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxadminpatchindex.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...

Ossigeno CMS 2.2_pre1 - '/ossigeno_modules/ossigeno-catalogo/xax/ossigeno/catalogo/common.php?ossigeno' Remote File Inclusion

source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Ossigeno CMS 2.2_pre1 - '/upload/xax/admin/modules/install_module.php?level' Remote File Inclusion

source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Ossigeno CMS 2.2_pre1 - '/upload/xax/ossigeno/admin/install_module.php?level' Remote File Inclusion

source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

ht://Dig 3.2 - Htsearch Cross-Site Scripting

source: https://www.securityfocus.com/bid/26610/info ht://Dig is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script code in a user's browser session in the context...

Satel Lite - Satellite.php Local File Inclusion

Satel Lite - Satellite.php Local File Inclusion source: https://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information...

PHPSlideShow 0.9.9 - 'Directory' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26575/info PHPSlideShow is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the conte...

FMDeluxe 2.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26587/info FMDeluxe is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script code in a user's browser session in the context...

PHP 5.2.1 - Folded Mail Headers Email Header Injection

source: https://www.securityfocus.com/bid/23145/info PHP is prone to an email-header-injection vulnerability because it fails to properly sanitize user-supplied input when constructing email messages. Exploiting this issue allows a malicious user to create arbitrary email headers, and then create...

SafeNet Sentinel Protection Server 7.x/Keys Server 1.0.3 - Directory Traversal

source: https://www.securityfocus.com/bid/26583/info Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that cou...

FMDeluxe 2.1 - index.php Cross-Site Scripting

FMDeluxe 2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26587/info FMDeluxe is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows an attacker to execute arbitrary HTML or script...

SimpleGallery 0.1.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26585/info SimpleGallery is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a user's browser session in the...

VBTube 1.1 - Search Cross-Site Scripting

VBTube 1.1 - Search Cross-Site Scripting source: https://www.securityfocus.com/bid/26566/info VBTube is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a...

Bandersnatch 0.4 - index.php Multiple Cross-Site Scripting Vulnerabilities

Bandersnatch 0.4 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

FooSun - 'Api_Response.asp' SQL Injection

source: https://www.securityfocus.com/bid/26552/info FooSun is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

GWExtranet - Multiple Directory Traversal Vulnerabilities

GWExtranet - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/26525/info GWExtranet is prone to multiple directory-traversal vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...