Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

SQLiteManager 1.2.4 - main.php?dbsel Cross-Site Scripting

SQLiteManager 1.2.4 - main.php?dbsel Cross-Site Scripting source: https://www.securityfocus.com/bid/51294/info SQLiteManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

VertrigoServ 2.25 - 'extensions.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/51293/info VertrigoServ is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

QuiXplorer 'index.php' Arbitrary File Upload Vulnerability

QuiXplorer is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process. QuiXplorer 2.3 is vulnerable; other versions may...

SQLiteManager 1.2.4 - 'main.php?dbsel' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51294/info SQLiteManager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary scrip...

Yaws-Wiki 1.88 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51276/info Yaws is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML...

Orchard 1.3.9 - ReturnUrl Open Redirection

Orchard 1.3.9 - ReturnUrl Open Redirection source: https://www.securityfocus.com/bid/51260/info Orchard is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

Limny 3.0.1 - login.php Script Cross-Site Scripting

Limny 3.0.1 - login.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/51261/info Limny is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting

WordPress Plugin Comment Rating 2.9.20 - path Cross-Site Scripting source: https://www.securityfocus.com/bid/51241/info The Comment Rating plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could leverag...

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting

WordPress Plugin WHOIS 1.4.2 3 - domain Cross-Site Scripting source: https://www.securityfocus.com/bid/51244/info WHOIS for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

WordPress Plugin WP Live.php 1.2.1 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting

WordPress Plugin WP Live.php 1.2.1 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/51220/info WP Live.php plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Siena CMS 1.242 - err Cross-Site Scripting

Siena CMS 1.242 - err Cross-Site Scripting source: https://www.securityfocus.com/bid/51218/info Siena CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin TheCartPress 1.6 - OptionsPostsList.php Cross-Site Scripting

WordPress Plugin TheCartPress 1.6 - OptionsPostsList.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51216/info The TheCartPress WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting

WordPress Plugin The Welcomizer 1.3.9.4 - twiz-index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51037/info The Welcomizer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may levera...

WordPress Plugin The Welcomizer 1.3.9.4 - 'twiz-index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51037/info The Welcomizer plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Pligg CMS 1.1.4 - SERVER[php_self] Cross-Site Scripting

Pligg CMS 1.1.4 - SERVERphpself Cross-Site Scripting source: https://www.securityfocus.com/bid/51274/info Pligg CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

epesi BIM 1.2 rev 8154 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51149/info epesi BIM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Cyberoam UTM 10 - tableid SQL Injection

Cyberoam UTM 10 - tableid SQL Injection source: https://www.securityfocus.com/bid/51143/info Cyberoam UTM is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PHPShop CMS 3.4 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/51130/info PHPShop CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploiting these issues could allow an attacker ...