Zimbra - aspell.php Cross-Site Scripting

Zimbra - aspell.php Cross-Site Scripting source: https://www.securityfocus.com/bid/58913/info Zimbra is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection

source: https://www.securityfocus.com/bid/58911/info PHP Address Book is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...

FUDforum - Multiple Remote PHP Code Injection Vulnerabilities

FUDforum - Multiple Remote PHP Code Injection Vulnerabilities source: https://www.securityfocus.com/bid/58845/info FUDforum is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input...

WordPress Plugin Banners Lite - 'wpbanners_show.php' HTML Injection

source: https://www.securityfocus.com/bid/58671/info The Banners Lite plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

Open-Xchange Server Multiple Vulnerabilities (Mar 2013) - Active Check

Open-Xchange Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Your Own Classifieds - Cross-Site Scripting

Your Own Classifieds - Cross-Site Scripting source: https://www.securityfocus.com/bid/58399/info Your Own Classifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

WordPress Plugin Terillion Reviews - Profile Id HTML Injection

source: https://www.securityfocus.com/bid/58415/info The Terillion Reviews plugin for WordPress is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied...

McAfee Vulnerability Manager - 'cert_cn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58401/info McAfee Vulnerability Manager is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the...

WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Smart Flv - jwplayer.swf Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58135/info The Smart Flv plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

phpMyRecipes - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58160/info phpMyRecipes is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be executed in the context of the affected site, potentially allowing the...

File Manager - HTML Injection Local File Inclusion

File Manager - HTML Injection Local File Inclusion source: https://www.securityfocus.com/bid/58313/info File Manager is prone to an HTML-injection vulnerability and a local file-include vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of t...

Photodex ProShow Producer - Multiple DLL Loading Arbitrary Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/58131/info Photodex ProShow Producer is prone to multiple arbitrary code-execution vulnerabilities. An attacker can exploit these issues by enticing a legitimate user to use the vulnerable application to open a customized library file from application pat...

ZenPhoto - index.php SQL Injection

ZenPhoto - index.php SQL Injection source: https://www.securityfocus.com/bid/58078/info Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ZeroClipboard 1.9.x - id Cross-Site Scripting

ZeroClipboard 1.9.x - id Cross-Site Scripting source: https://www.securityfocus.com/bid/58116/info ZeroClipboard is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Novell GroupWise Client ActiveX SetEngine Pointer Manipulation

Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...

Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities

Dell SonicWALL Scrutinizer - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/57949/info The Dell SonicWALL Scrutinizer is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow...

WordPress Plugin Wysija Newsletters - Multiple SQL Injections

WordPress Plugin Wysija Newsletters - Multiple SQL Injections source: https://www.securityfocus.com/bid/57775/info The Wysija Newsletters Plugin for WordPress is prone to multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to compromise the application, access ...

Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities

Novell Groupwise Client 8.0 - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/57657/info Novell Groupwise Client is prone to multiple remote code-execution vulnerabilities. A remote attacker can leverage this issue to execute arbitrary code within the...

Perforce P4Web - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/57514/info Perforce P4Web is prone to multiple cross site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WordPress Plugin Gallery - 'filename_1' Arbitrary File Access

source: https://www.securityfocus.com/bid/57256/info The Gallery plugin for WordPress is prone to an arbitrary file-access vulnerability. Remote attackers can exploit this issue to read arbitrary files. This may lead to further attacks. Gallery 3.8.3 is vulnerable; other versions may also be...