PG Matchmaking - browse_men.php?show Cross-Site Scripting

PG Matchmaking - browsemen.php?show Cross-Site Scripting source: https://www.securityfocus.com/bid/35808/info PG Matchmaking is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

PG Matchmaking - search.php?show Cross-Site Scripting

PG Matchmaking - search.php?show Cross-Site Scripting source: https://www.securityfocus.com/bid/35808/info PG Matchmaking is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Pilot Group eTraining - 'courses_login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35834/info PG eTraining is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection

CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection source: https://www.securityfocus.com/bid/35783/info CommuniGate Pro is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to run HTML and...

CommuniGate Pro 5.2.14 - Web Mail URI Parsing HTML Injection

source: https://www.securityfocus.com/bid/35783/info CommuniGate Pro is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to run HTML and script code in the context of the affected site, to steal...

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

FireStats is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. FireStats 1.6.1 is vulnerable; prior versio...

Programs Rating - 'rate.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Programs Rating - rate.php?id Cross-Site Scripting

Programs Rating - rate.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

PHPLive! 3.2.2 - 'request.php' SQL Injection

source: https://www.securityfocus.com/bid/35718/info PHPLive! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37997/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities

XAMPP 1.6.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37997/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

Horde 3.1 - 'Passwd' Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/35573/info The Horde 'Passwd' module is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Microsoft Internet Explorer 6 - 'JavaScript:' URI in 'Refresh' Header Cross-Site Scripting

source: https://www.securityfocus.com/bid/35570/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the context of the user running the...

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting

PHP-Nuke 8.0 Downloads Module - query Cross-Site Scripting source: https://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

PHP-Nuke 8.0 Downloads Module - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

PRTG Traffic Grapher 'Monitor_Bandwidth' Cross Site Scripting Vulnerability

PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal

source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to retrieve and read...

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with...

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35140/info Achievo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Achievo 1.3.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35140/info Achievo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...