WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info WonderCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

LFI in LightNEasy

Vulnerability ID: HTB22752 Reference: http://www.htbridge.ch/advisory/lfiinlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

PHPB2B 4.1 - q Cross-Site Scripting

PHPB2B 4.1 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/51221/info PHPB2B is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

LiveZilla 3.2.0.2 - Track Module server.php Cross-Site Scripting

LiveZilla 3.2.0.2 - Track Module server.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45586/info LiveZilla is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

LiveZilla 3.2.0.2 - 'Track' Module 'server.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45586/info LiveZilla is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Social Share - search Cross-Site Scripting

Social Share - search Cross-Site Scripting source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WordPress Plugin Accept Signups 0.1 - email Cross-Site Scripting

WordPress Plugin Accept Signups 0.1 - email Cross-Site Scripting source: https://www.securityfocus.com/bid/45548/info The Accept Signups Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Plugin Accept Signups 0.1 - 'email' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45548/info The Accept Signups Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

MantisBT 'db_type' Parameter Local File Inclusion

The MantisBT install on the remote host fails to sanitize user input to the 'dbtype' parameter of the 'admin/upgradeunattended.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' and 'magicquotesgpc' settings, an unauthenticated attacker can exploit this...

Habari 0.6.5 - Multiple Cross-Site Scripting Vulnerabilities

Habari 0.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45530/info Habari is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to execute...

WordPress Plugin Mediatricks Viva Thumbs - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/45539/info The Mediatricks Viva Thumbs plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues using directory-traversal strings to...

Calibre 0.7.34 - Cross-Site Scripting Directory Traversal

Calibre 0.7.34 - Cross-Site Scripting Directory Traversal source: https://www.securityfocus.com/bid/45532/info Calibre is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues wi...

Habari 0.6.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45530/info Habari is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

REstate Real Estate Script Cross Site Scripting

========================================================= REstate Real Estate Script Persistent Xss Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ ...

Inout Webmail Script Persistent XSS Vulnerability

Exploit for php platform in category web applications Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Inout Webmail Cross Site Scripting

Name :inoutwebmail Persistent Xss Vulnerability Date : Dec,20 2010 Vendor Url :http://www.inoutscripts.com/ Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure

Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure source: https://www.securityfocus.com/bid/45476/info Alt-N WebAdmin is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Alt-N WebAdmin 3.3.3 - Remote Source Code Information Disclosure

source: https://www.securityfocus.com/bid/45476/info Alt-N WebAdmin is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process...

slickMsg - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/45403/info slickMsg is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

BEdita 3.0.1.2550 Cross Site Request Forgery

Vulnerability ID: HTB22729 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbedita.html Product: BEdita Vendor: Chialab & ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 "betula" and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF...