HeffnerCMS 1.22 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/43006/info HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts i...

SyndeoCMS Local File Include, Cross Site Scripting, and HTML Injection Vulnerabilities

SyndeoCMS is prone to a local file-include, a cross-site scripting, and an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Exploiting the local file-include issue allows remote attackers to view or execute local files within the context of the...

MySource Matrix - 'char_map.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43020/info MySource Matrix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

Pligg CMS 1.0.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/42967/info Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

NuSOAP 0.9.5 - 'nusoap.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting

NuSOAP 0.9.5 - nusoap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42959/info NuSOAP is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

ApPHP Calendar XSS - CSRF

Vendor: ApPHP Affected versions: All Script: ApPHP Calendar URL: http://www.apphp.com/php-calendar/index.php Vulnerability type: XSS - CSRF Risk rating: Medium Exploit Attack: XSS - CSRF in calendar.php via POST Vulnerable file: calendar.class.php Vulnerable parameters: - categoryname -...

CMS WebManager-Pro - 'c.php' SQL Injection

source: https://www.securityfocus.com/bid/42951/info CMS WebManager-Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

OneCMS 2.6.1 - index.php Cross-Site Scripting

OneCMS 2.6.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

OneCMS 2.6.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42949/info OneCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

ArtGK Cross Site Scripting

===================================== Vulnerability ID: HTB22588 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms1.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 201...

Rumba XML 2.4 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities

Rumba XML 2.4 - index.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42914/info Rumba XML is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

CGI Generic HTML Injections (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML to be executed in a user's browser within the security context of the affected site. The remote web server...

ArtGK CMS - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42923/info ArtGK CMS is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

HP Insight Diagnostics Online Edition 8.4 - 'survey.php?category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

File Content Disclosure in TCMS

Vulnerability ID: HTB22579 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureintcms.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: File Content Disclosure...

BlastChat Client 3.3 - Cross-Site Scripting

BlastChat Client 3.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/42734/info BlastChat Client is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Auto CMS 1.6 - autocms.php Cross-Site Scripting

Auto CMS 1.6 - autocms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42764/info Auto CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

XSS vulnerability in MAXdev

Vulnerability ID: HTB22563 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinmaxdev.html Product: MAXdev Vendor: MAXdev http://www.maxdev.it/ Vulnerable Version: 1.0.83 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: XSS Cross Site Scripting Status:...