BOINC 5.10.20 - forum_forum.php?id Cross-Site Scripting

BOINC 5.10.20 - forumforum.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/25644/info BOINC Berkeley Open Infrastructure for Network Computing is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An...

BOINC 5.10.20 - 'text_search_action.php?search_string' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25644/info BOINC Berkeley Open Infrastructure for Network Computing is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to execute arbitrary...

Proxy Anket 3.0.1 - 'anket.asp' SQL Injection

source: https://www.securityfocus.com/bid/25613/info Proxy Anket is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting

source: https://www.securityfocus.com/bid/25531/info Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting

Apache Tomcat 5.5.15 - cal2.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/25531/info Apache Tomcat is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

212Cafe WebBoard 6.30 - Read.php SQL Injection

212Cafe WebBoard 6.30 - Read.php SQL Injection source: https://www.securityfocus.com/bid/25526/info 212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

PHPGedView 4.1 - login.php Cross-Site Scripting

PHPGedView 4.1 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25458/info PhpGedView is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site...

PHPGedView 4.1 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25458/info PhpGedView is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the...

AutoIndex PHP Script 2.2.1 - index.php Cross-Site Scripting

AutoIndex PHP Script 2.2.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25448/info AutoIndex PHP Script is prone a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute...

Dale Mooney Calendar Events - 'Viewevent.php' SQL Injection

source: https://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Dale Mooney Calendar Events - Viewevent.php SQL Injection

Dale Mooney Calendar Events - Viewevent.php SQL Injection source: https://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Arcadem 2.01 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25432/info Arcadem is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Arcadem 2.01 - index.php Remote File Inclusion

Arcadem 2.01 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/25432/info Arcadem is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...

coWiki - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25393/info coWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting

source: https://www.securityfocus.com/bid/25391/info ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

m-phorum 0.3 - index.php Cross-Site Scripting

m-phorum 0.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25394/info m-phorum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting

ALeadSoft Search Engine Builder - Search.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/25391/info ALeadSoft Search Engine Builder is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage...

Firesoft - 'Class_TPL.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25366/info Firesoft is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Text File Search Classic - TextFileSearch.asp Cross-Site Scripting

Text File Search Classic - TextFileSearch.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/25350/info Text File Search Classic is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...