PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14928/info PHPMyFAQ is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

vBulletin 1.0.1 lite2.x3.0 - admincpmodlog.php?orderby Cross-Site Scripting

vBulletin 1.0.1 lite2.x3.0 - admincpmodlog.php?orderby Cross-Site Scripting source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

vBulletin 1.0.1 lite2.x3.0 - admincpuser.php?email Cross-Site Scripting

vBulletin 1.0.1 lite2.x3.0 - admincpuser.php?email Cross-Site Scripting source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

PHPNuke78.txt

NewAngels Advisory 7PHP Nuke sqlquery"SELECT active, view FROM ".$prefix."modules WHERE title='$name'"; The $name variable is not checked so you could inject malicious SQL Code. In an file which is included whe have the following code: $queryString = strtolower$SERVER'QUERYSTRING'; if...

Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection

source: https://www.securityfocus.com/bid/14776/info WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...

PBLang 4.65 Bulletin Board System - SetCookie.php Directory Traversal

PBLang 4.65 Bulletin Board System - SetCookie.php Directory Traversal source: https://www.securityfocus.com/bid/14765/info PBLang is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this...

mybbXSS.txt

XSS VULN IN ALL MYBB VERSIONS INCLUDING PR2 Vendor: given SEVEN days notice, no patch released! Just to say, I am apalled with the fact that I contacted MyBB on the 30 August, and was originally not planning to go public. However, because they have failed to release a patch I have decided to aler...

[Full-disclosure] XSS VULN IN ALL MYBB VERSIONS (INCLUDING PR2)

XSS VULN IN ALL MYBB VERSIONS INCLUDING PR2 Vendor: given SEVEN days notice, no patch released! Just to say, I am apalled with the fact that I contacted MyBB on the 30 August, and was originally not planning to go public. However, because they have failed to release a patch I have decided to aler...

MAXdev MD-Pro 1.0.73 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14751/info MAXdev MD-Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

PHPWebNotes 2.0 - 'Api.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/14679/info phpWebNotes is prone to a remote file include vulnerability. hpWebNotes is susceptible to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit...

phpMyAdmin < 2.6.4 Multiple XSS

According to its banner, the version of phpMyAdmin installed on the remote host may suffer from two cross-site scripting vulnerabilities due to its failure to sanitize user input to the 'error' parameter of the 'error.php' script and in 'libraries/auth/cookie.auth.lib.php'. A remote attacker may...

SaveWebPortal 3.4 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/14641/info SaveWebPortal is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-side...

RunCMS 1.1/1.2 Module Newbb_plus/Messages - SQL Injection

source: https://www.securityfocus.com/bid/14631/info RunCMS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

ATutor 1.5.1 - 'login.php?course' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14598/info ATutor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

W-Agora 4.2 - 'Site' Directory Traversal

source: https://www.securityfocus.com/bid/14597/info W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '../...

PHPFreeNews 1.40 - searchresults.php Multiple Cross-Site Scripting Vulnerabilities

PHPFreeNews 1.40 - searchresults.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14590/info PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

PHPTB Topic Board 2.0 - 'dev_o.php?absolutepath' Remote File Inclusion

source: https://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-side script...

MyBulletinBoard (MyBB) RC4 - action SQL Injection

MyBulletinBoard MyBB RC4 - action SQL Injection source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...