WordPress Plugin WP E-Commerce 3.8.6 - cart_messages[] Cross-Site Scripting

WordPress Plugin WP E-Commerce 3.8.6 - cartmessages Cross-Site Scripting source: https://www.securityfocus.com/bid/49009/info The WP e-Commerce plug-in for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverag...

mt LinkDatenbank - 'b' Cross-Site Scripting

source: https://www.securityfocus.com/bid/48967/info mt LinkDatenbank is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SA-CONTRIB-2011-034 - Display Suite - Cross Site Scripting

Display Suite allows you to take full control over how your content is displayed using a drag and drop interface. Arrange your nodes, views, comments, user data etc. the way you want without having to work your way through dozens of template files. In certain situations, Display Suite does not...

HESK 2.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49008/info HESK is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

BESNI OKUL PORTAL - sayfa.asp Cross-Site Scripting

BESNI OKUL PORTAL - sayfa.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/48969/info BESNI OKUL PORTAL is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

Skype 5.3 - Mobile Phone HTML Injection

Skype 5.3 - Mobile Phone HTML Injection source: https://www.securityfocus.com/bid/48951/info Skype is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-suppli...

PHPJunkYard GBook 1.6/1.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48905/info PHPJunkYard GBook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities

Online Grades 3.2.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48875/info Online Grades is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48805/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities

Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48814/info Cyberoam UTM is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48805/info Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Cyberoam UTM - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48814/info Cyberoam UTM is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Tiki Wiki CMS Groupware 7.2 - snarf_ajax.php Cross-Site Scripting

Tiki Wiki CMS Groupware 7.2 - snarfajax.php Cross-Site Scripting source: https://www.securityfocus.com/bid/48806/info Tiki Wiki CMS Groupware is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...

Joomla! Component com_hospital - SQL Injection

Joomla! Component comhospital - SQL Injection source: https://www.securityfocus.com/bid/48689/info The 'comhospital' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Component Controller - Itemid SQL Injection

Joomla! Component Controller - Itemid SQL Injection source: https://www.securityfocus.com/bid/48690/info The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Joomla! Component Juicy Gallery - 'picId' SQL Injection

source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise...

Joomla! Component com_newssearch - SQL Injection

source: https://www.securityfocus.com/bid/48698/info The 'comnewssearch' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

AJ Classifieds - 'listingid' SQL Injection

source: https://www.securityfocus.com/bid/48702/info AJ Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities

TCExam 11.2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48669/info TCExam is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Prontus CMS - page Cross-Site Scripting

Prontus CMS - page Cross-Site Scripting source: https://www.securityfocus.com/bid/48637/info Prontus CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue...