slickMsg - Cross-Site Scripting HTML Injection

slickMsg - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/45403/info slickMsg is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically...

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45420/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45395/info BlogCFC is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45395/info BlogCFC is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

RealNetworks RealPlayer Main.html Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks RealPlayer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

slickMsg 0.7-alpha - top.php Cross-Site Scripting

slickMsg 0.7-alpha - top.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45343/info slickMsg is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Social Share - vote.php HTTP Response Splitting

Social Share - vote.php HTTP Response Splitting source: https://www.securityfocus.com/bid/45550/info Social Share is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how w...

Joomla! Component com_mailto - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45356/info The 'commailto' component for Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

BizDir 05.10 - 'f_srch' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45342/info BizDir is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

net2ftp 0.98 (stable) - admin1.template.php LocalRemote File Inclusion

net2ftp 0.98 stable - admin1.template.php LocalRemote File Inclusion source: https://www.securityfocus.com/bid/45312/info The 'net2ftp' program is prone to a local file-include vulnerability and a remote file-include vulnerability because the application fails to sufficiently sanitize user-suppli...

Abtp Portal Project 'ABTPV_BLOQUE_CENT' Parameter Local and Remote File Include Vulnerabilities

Abtp Portal Project is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to compromise the application and the underlying compute...

Joomla Component com_isp persistent Xss Vulnerability

Exploit for php platform in category web applications =========================================== Joomla comisp persistent Xss Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1...

WordPress Plugin Safe Search - v1 Cross-Site Scripting

WordPress Plugin Safe Search - v1 Cross-Site Scripting source: https://www.securityfocus.com/bid/45267/info The Safe Search plugin for Wordpress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

WordPress Plugin Processing Embed 0.5 - 'pluginurl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45266/info The Processing Embed plugin for Wordpress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Zimplit CMS - zimplit.php?File Cross-Site Scripting

Zimplit CMS - zimplit.php?File Cross-Site Scripting source: https://www.securityfocus.com/bid/45252/info Zimplit CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary scri...

WordPress Plugin Twitter Feed - url Cross-Site Scripting

WordPress Plugin Twitter Feed - url Cross-Site Scripting source: https://www.securityfocus.com/bid/45294/info The Twitter Feed Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Zimplit CMS - 'zimplit.php?File' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45252/info Zimplit CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Freefloat FTP Server - Directory Traversal

Freefloat FTP Server - Directory Traversal source: https://www.securityfocus.com/bid/45218/info Freefloat FTP Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to retrieve arbitrary fil...

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

DotNetNuke 5.5.1 - InstallWizard.aspx Cross-Site Scripting

DotNetNuke 5.5.1 - InstallWizard.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/45180/info DotNetNuke is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...