Portix-PHP 2-0.3.2 Portal - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18227/info Portix-PHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in...

Ovidentia 5.6.x/5.8 - 'approb.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

Ovidentia 5.6.x/5.8 - 'vacadma.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

Ovidentia 5.6.x/5.8 - 'posts.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

osTicket 1.x - 'Open_form.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18190/info osTicket is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities

EVA-Web 2.1.2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

EVA-Web 2.1.2 - rubrique.php3?date Cross-Site Scripting

EVA-Web 2.1.2 - rubrique.php3?date Cross-Site Scripting source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

EVA-Web 2.1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18161/info EVA-Web is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

TikiWiki 1.9 - tiki-lastchanges.php Multiple Cross-Site Scripting Vulnerabilities

TikiWiki 1.9 - tiki-lastchanges.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18143/info TikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting

Chipmunk 1.4 - Guestbook index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18118/info Chipmunk Guestbook is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

DoceboLms 2.0.x - Lang Multiple Remote File Inclusions

DoceboLms 2.0.x - Lang Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18110/info DoceboLMS is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...

Prodder 0.4 - Arbitrary Shell Command Execution

Prodder 0.4 - Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/18068/info Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

ASPBB 0.5.2 - default.asp?action Cross-Site Scripting

ASPBB 0.5.2 - default.asp?action Cross-Site Scripting source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

ASPBB 0.5.2 - 'profile.asp?get' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

BoastMachine 3.1 - admin.php Cross-Site Scripting

BoastMachine 3.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18012/info BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

BoastMachine 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18012/info BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...

Sphider 1.3 - search.php Multiple Cross-Site Scripting Vulnerabilities

Sphider 1.3 - search.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17997/info Sphider is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

PHPRemoteView - PRV.php Multiple Cross-Site Scripting Vulnerabilities

PHPRemoteView - PRV.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17994/info PhpRemoteView is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

PHPRemoteView - 'PRV.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17994/info PhpRemoteView is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...