QuiXplorer 2.x - lang Local File Inclusion

QuiXplorer 2.x - lang Local File Inclusion source: https://www.securityfocus.com/bid/37393/info QuiXplorer is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

iSupport 1.8 - index.php?which Cross-Site Scripting

iSupport 1.8 - index.php?which Cross-Site Scripting source: https://www.securityfocus.com/bid/37380/info iDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input An attacker may leverage these issues to...

SA-CONTRIB-2009-112 - Sections - Cross Site Scripting

The Sections module allows the creation of sections within a site. Each section has an installed template, theme or style attached to it. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. Users who can take...

Drupal Module Sections 5.x-1.2/6.x-1.2 - HTML Injection

source: https://www.securityfocus.com/bid/37371/info The Sections module for Drupal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

Drupal Module Sections 5.x-1.26.x-1.2 - HTML Injection

Drupal Module Sections 5.x-1.26.x-1.2 - HTML Injection source: https://www.securityfocus.com/bid/37371/info The Sections module for Drupal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

Article Directory - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/37356/info Article Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Horde 3.3.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

APC Switched Rack PDU Cross Site Scripting

APC Switched Rack PDU XSS Vulnerability By Jamal Pecou jpecou at gmail dot c0m. Product Info Product InfoTested Versions Model = AP7932 Harware Revision = B2 Application Module Name = rpdu Version = v3.3.3Tested First Version = 3.7.0Current APC OS AOS Name = aos Version = v3.3.4 Vulnerability XSS...

TenderSystem 0.9.5 - 'main.php' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/41792/info TenderSystem is prone to a multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary...

The Next Generation of Genealogy Sitebuilding - 'searchform.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41656/info The Next Generation of Genealogy Sitebuilding is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Automne.ws CMS 4.0.0rc2 - Multiple Remote File Inclusions

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=Shell...

Ez Cart - 'sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Ez Cart - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41742/info Ez Poll Hoster is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Million Pixel Script 3 - pa Cross-Site Scripting

Million Pixel Script 3 - pa Cross-Site Scripting source: https://www.securityfocus.com/bid/37315/info Million Pixel Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability

No description provided by source. Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=She...

phpFaber CMS 1.3.36 - module.php Cross-Site Scripting

phpFaber CMS 1.3.36 - module.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37329/info phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

The Next Generation of Genealogy Sitebuilding - searchform.php Cross-Site Scripting

The Next Generation of Genealogy Sitebuilding - searchform.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41656/info The Next Generation of Genealogy Sitebuilding is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An...

Model Agency Manager - search_process.php Cross-Site Scripting

Model Agency Manager - searchprocess.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41509/info Model Agency Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WS Interactive Automne 4.0 - '228-recherche.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41686/info Automne is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...