Joomla! Component com_quiz - SQL Injection

Joomla! Component comquiz - SQL Injection source: https://www.securityfocus.com/bid/56338/info The Quiz component for Joomla! is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the...

TP-Link TL-WR841N Router - Local File Inclusion

TP-Link TL-WR841N Router - Local File Inclusion source: https://www.securityfocus.com/bid/56320/info TP-LINK TL-WR841N router is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and...

TP-Link TL-WR841N Router - Local File Inclusion

source: https://www.securityfocus.com/bid/56320/info TP-LINK TL-WR841N router is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the...

CorePlayer - 'callback' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56334/info CorePlayer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Gramophone - 'rs' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56299/info Gramophone is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

SMF - view Cross-Site Scripting

SMF - view Cross-Site Scripting source: https://www.securityfocus.com/bid/56223/info SMF is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

SMF - 'view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info SMF is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

CMS Mini 0.2.2 - index.php Script Cross-Site Scripting

CMS Mini 0.2.2 - index.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/56148/info CMS Mini is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code ...

CMS Mini 0.2.2 - 'index.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/56148/info CMS Mini is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...

WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56090/info The Slideshow plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WANem - Multiple Cross-Site Scripting Vulnerabilities

WANem - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56326/info WANem is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

WordPress Plugin Crayon Syntax Highlighter - wp_load Remote File Inclusion

WordPress Plugin Crayon Syntax Highlighter - wpload Remote File Inclusion source: https://www.securityfocus.com/bid/55919/info The Crayon Syntax Highlighter plug-in for WordPress is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input...

Open Realty - select_users_lang Local File Inclusion

Open Realty - selectuserslang Local File Inclusion source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

ZenPhoto - admin-news-articles.php Cross-Site Scripting

ZenPhoto - admin-news-articles.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55755/info Zenphoto is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Zenphoto 1.4.3.2 Cross Site Scripting

------------------------- Affected products: ------------------------- Product : Zenphoto 1.4.3.2 and maybe older fixed in 1.4.3.3 Affected function: printPublishIconLink ---------- Details: ---------- The file admin-news-articles.php calls the function printPublishIconLink which generates HTML...

Poweradmin index.php XSS

The Poweradmin install hosted on the remote web server is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input appended to the URL of the 'index.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script code into a user'...

WordPress Plugin Akismet - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55749/info The Akismet plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WordPress ABC-Test 0.1 Cross Site Scripting

This effects version 0.1 of abc-test the hole is fixed in version 0.2 --------- Affected products: --------- Product : wordpress plugin abc-test Affected file: abctestconfig.php ---- Details: ---- The file abctestconfig.php does not sanitize the input from $GET 'id' effectively. This allows a use...

WordPress Plugin ABC Test - id Cross-Site Scripting

WordPress Plugin ABC Test - id Cross-Site Scripting source: https://www.securityfocus.com/bid/55689/info The ABC Test plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...