OpenEMR 2.8.2 - Import_XML.php Remote File Inclusion

OpenEMR 2.8.2 - ImportXML.php Remote File Inclusion source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application...

OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22348/info OpenEMR is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22346/info OpenEMR is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

EncapsCMS 0.3.6 - 'common_foot.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22319/info EncapsCMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

MDPro 1.0.76 - index.php SQL Injection

MDPro 1.0.76 - index.php SQL Injection source: https://www.securityfocus.com/bid/22293/info MDPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Apple Mac OSX 10.4.x - Software Update Format String

source: https://www.securityfocus.com/bid/22222/info Apple Software Update is prone to a format-string vulnerability. This issue presents itself because the application fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. A...

Echo Security Advisory 2007.62

-------------------------------------------------- ECHOADV62$2007 Upload Service 1.0 remote file inclusion -------------------------------------------------- Author : Ahmad Muammar W.K a.k.a y3dips Date Found : January, 21st 2007 Location : Indonesia, Jakarta web :...

212Cafe Board 0.08 Beta / 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/22167/info 212cafeBoard is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

Bitweaver 1.3.1 Articles and Blogs - Multiple Cross-Site Scripting Vulnerabilities

Bitweaver 1.3.1 Articles and Blogs - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22169/info Bitweaver is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

Unique Ads - 'Banner.php' SQL Injection

source: https://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Upload Service 1.0 - top.php?maindir Remote File Inclusion

Upload Service 1.0 - top.php?maindir Remote File Inclusion ------------------------------------------------------------------------------------ ECHOADV62$2007 Upload Service 1.0 remote file inclusion ------------------------------------------------------------------------------------ Author : Ahm...

Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------ ECHOADV62$2007 Upload Service 1.0 remote file inclusion ------------------------------------------------------------------------------------ Author : Ahmad Muammar W.K a.k.a...

Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Upload Service 1.0 top.php maindir Remote File Inclusion Vulnerability ========================================================================...

ArsDigita Community System 3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the conte...

MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22097/info MyBloggie is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting

Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

Indexu 5.05.3 - new.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - new.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Indexu 5.05.3 - search.php?keyword Cross-Site Scripting

Indexu 5.05.3 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...

Indexu 5.05.3 - mailing_list.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - mailinglist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...