e107 Hupsi_fancybox Plugin - Uploadify.php Arbitrary File Upload

e107 Hupsifancybox Plugin - Uploadify.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54091/info The Hupsifancybox Plugin for e107 is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to...

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure source: https://www.securityfocus.com/bid/54058/info Wp-ImageZoom for WordPress is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Multiple WordPress Themes - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54052/info Multiple Themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to uploa...

Multiple WordPress Themes - upload.php Arbitrary File Upload

Multiple WordPress Themes - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54052/info Multiple Themes for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-suppli...

WordPress Plugin Wp-ImageZoom - 'file' Remote File Disclosure

source: https://www.securityfocus.com/bid/54058/info Wp-ImageZoom for WordPress is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process,...

MediaWiki 1.x - 'uselang' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53998/info MediaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Funeral Script PHP - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/54402/info Funeral Script PHP is prone to multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker ...

Joomla! Component hwdVideoShare - flash_upload.php Arbitrary File Upload

Joomla! Component hwdVideoShare - flashupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54037/info The hwdVideoShare component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize...

Joomla! Component hwdVideoShare - 'flash_upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54037/info The hwdVideoShare component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

vBSEO - 'u' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55908/info vBSEO is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

ADICO - index.php Script SQL Injection

ADICO - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54023/info ADICO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Juniper Networks Mobility System Software - aaawba_login.html Cross-Site Scripting

Juniper Networks Mobility System Software - aaawbalogin.html Cross-Site Scripting source: https://www.securityfocus.com/bid/54075/info Mobility System Software is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to...

SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53983/info SPIP is prone to multiple unspecified cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

WordPress Plugin HD FLV Player - 'uploadVideo.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53967/info HD FLV Player plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to...

Joomla! Component IDoEditor - 'image.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53973/info The IDoEditor component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary...

phpAcounts v. 0. 5. 3 SQL injection and fix-vulnerability warning-the black bar safety net

Author: loneferret Affected version: 0.5.3 Developer address: http://phpaccounts.com/ Test platform: Ubuntu Server 11.10 Old app, still fun. Auth. Bypass: http://www.xxx.com /phpaccounts/index.php Username: x' or '1'='1' Password: whatever Upload php shell in preferences Letterhead image upload...

Joomla! Component DentroVideo 1.2 - upload.php Arbitrary File Upload

Joomla! Component DentroVideo 1.2 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53972/info The DentroVideo component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately...

Joomla! Component mod_artuploader - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53969/info The Art Uploader component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitra...

Joomla! Component Easy Flash Uploader - 'helper.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53977/info The Easy Flash Uploader component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...