PHP Easy Shopping Cart 3.1R - 'subitems.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44142/info PHP Easy Shopping Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

PHP Easy Shopping Cart 3.1R - subitems.php Cross-Site Scripting

PHP Easy Shopping Cart 3.1R - subitems.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44142/info PHP Easy Shopping Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a...

Silurus Classifieds - 'wcategory.php?ID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a directory-traversal vulnerability because it fails to sufficiently...

Silurus Classifieds - 'search.php?keywords' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

TinyBrowser Multiple XSS

TinyBrowser, an open source web file browser, is running on the remote host. TinyBrowser is typically bundled with web applications, such as TinyMCE WYSIWYG content editor or the Joomla! content management system, although it can also be used in its standalone configuration or integrated with oth...

BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability

This host is installed with BaoFeng Storm and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbbaofengstormsmplbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone...

68 Classifieds 4.1 - category.php Cross-Site Scripting

68 Classifieds 4.1 - category.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WebAsyst Shop-Script PREMIUM - 'SearchString' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43380/info Shop-Script PREMIUM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Basilic 1.5.13 - index.php Cross-Site Scripting

Basilic 1.5.13 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43372/info Basilic is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

WebShop Hun 1.062s - index.php Local File Inclusion Cross-Site Scripting

WebShop Hun 1.062s - index.php Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/43429/info WebShop Hun is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker...

SkaLinks 1.5 - cat Multiple Cross-Site Scripting Vulnerabilities

SkaLinks 1.5 - cat Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43430/info SkaLinks is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

WebShop Hun 1.062s - '/index.php' Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43429/info WebShop Hun is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversa...

TurnkeySetup Net Marketing 6.0 - faqs.php Cross-Site Scripting

TurnkeySetup Net Marketing 6.0 - faqs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43435/info Net Marketing is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary HT...

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

MyDLstore Pixel Ad Script - 'payment.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43448/info MyDLstore Pixel Ad Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...