PowerEasy 2006 - ComeUrl Cross-Site Scripting

PowerEasy 2006 - ComeUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/39696/info PowerEasy is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

FlashCard 2.6.5 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39648/info FlashCard is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Ziggurat Farsi CMS - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39311/info Ziggurat Farsi CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Blog System 1.x - Multiple Input Validation Vulnerabilities

Blog System 1.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/39406/info Blog System is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include,...

AneCMS 1.0 - Multiple Local File Inclusions

AneCMS 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive...

SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5

Product Imnformation -------------------- PhotoPost vBGallery is a popular commercial Image Gallery Add-on fr vBulletin which is being developed by All Enthusiasts, Inc. http://www.photopost.com Description ----------- PhotoPost vBGallery 2.5 allows the user to modify gallery settings for his...

OSSIM 2.2.1 - '$_SERVER['PHP_SELF']' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Piwik 0.5.5 - 'form_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39144/info Piwik is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

OSSIM 2.2.1 - $_SERVER[PHP_SELF] Cross-Site Scripting

OSSIM 2.2.1 - $SERVERPHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/39145/info OSSIM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

WebMaid CMS Multiple Remote and Local File Include Vulnerabilities

WebMaid CMS is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer or in a remote location with the...

Joomla! Component com_jresearch - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/38917/info The 'comjresearch' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execut...

Joomla! Component com_cb - cat SQL Injection

Joomla! Component comcb - cat SQL Injection source: https://www.securityfocus.com/bid/38916/info The 'comcb' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Left 4 Dead Stats 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= Left 4 Dead Stats 1.1 SQL Injection Vulnerability ================================================= Left 4 Dead Stats SQL Injection Vulnerability Author: Sora Website:...

eFront 3.5.5 - langname Local File Inclusion

eFront 3.5.5 - langname Local File Inclusion source: https://www.securityfocus.com/bid/38787/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...

Joomla! Component com_as - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/38757/info The 'comas' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

SugarCRM Cross Site Scripting

Class: Stored Cross Site Scripting XSS CVE: CVE-2010-0465 Remote: Yes Local: Yes Published: Jan 1, 2010 12:01AM Timeline: Submission to Mitre: January 29, 2010 Vendor Contact: February 18, 2010 Vendor Response: February 19, 2010 Patch Available: March 10, 2010 Credit: Jeromie Jackson CISSP, CISM...

Joomla! Component com_as - catid SQL Injection

Joomla! Component comas - catid SQL Injection source: https://www.securityfocus.com/bid/38757/info The 'comas' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

CH-CMS.ch 2 - Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/39888/info CH-CMS.ch is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver...

Dojo Toolkit 1.4.1 - dijittests_testCommon.js?theme Cross-Site Scripting

Dojo Toolkit 1.4.1 - dijitteststestCommon.js?theme Cross-Site Scripting source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execut...

SpamAssassin Milter Plugin 'mlfi_envrcpt()' Remote Arbitrary Command Injection Vulnerability

SpamAssassin Milter Plugin is prone to a remote command- injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with root privileges. SpamAssassin Milter Plugin 0.3.1 is affected; other...