TinyBrowser - edit.php Directory Listing

TinyBrowser - edit.php Directory Listing source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an unsuspecting...

Quick.CMS Quick.Cart - Cross-Site Scripting

Quick.CMS Quick.Cart - Cross-Site Scripting source: https://www.securityfocus.com/bid/57254/info Quick.Cms and Quick.Cart are prone to a cross-site scripting vulnerability because they fail to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Samsung Kies - Remote Buffer Overflow

Samsung Kies - Remote Buffer Overflow source: https://www.securityfocus.com/bid/57249/info Samsung Kies is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer. Attackers can exploit this issue to...

Facebook for Android - 'LoginActivity' Information Disclosure

source: https://www.securityfocus.com/bid/57173/info Facebook for Android is prone to an information-disclosure vulnerability. Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks. Facebook for Android 1.8.1 is vulnerable;...

Invision Power Services Invision Gallery 1.0.1 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications source: http://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient...

Hero Framework - userslogin Username Cross-Site Scripting

Hero Framework - userslogin Username Cross-Site Scripting source: https://www.securityfocus.com/bid/57035/info Hero is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script...

WordPress Theme Toolbox - 'mls' SQL Injection

source: https://www.securityfocus.com/bid/56745/info The Toolbox theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...

WordPress Plugin Webplayer - id SQL Injection

WordPress Plugin Webplayer - id SQL Injection source: https://www.securityfocus.com/bid/56660/info The Webplayer plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to...

WordPress Plugin Plg Novana - id SQL Injection

WordPress Plugin Plg Novana - id SQL Injection source: https://www.securityfocus.com/bid/56661/info The Plg Novana plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to...

WordPress Plugin Zarzadzonie Kontem - 'ajaxfilemanager.php' Script Arbitrary File Upload

source: https://www.securityfocus.com/bid/56663/info The Zarzadzonie Kontem plugin for WordPress is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary files to the affected...

WordPress Plugin Zingiri Web Shop - 'path' Arbitrary File Upload

source: https://www.securityfocus.com/bid/56659/info The Zingiri Web Shop plugin for WordPress is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them. An attacker may leverage this issue to upload arbitrary files to the affected...

WordPress Tagged Albums Plugin 'id' Parameter SQL Injection Vulnerability

WordPress Tagged Albums Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cryptocat 2.0.21 Chrome Extension - 'img/keygen.gif' File Information Disclosure

source: https://www.securityfocus.com/bid/61090/info Cryptocat is prone to an information disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Cryptocat 2.0.21 is vulnerable; other versions may also be affected...

SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56342/info SolarWinds Orion IP Address Manager IPAM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code in the browser of an...

VicBlog - Multiple SQL Injections

VicBlog - Multiple SQL Injections source: https://www.securityfocus.com/bid/56307/info VicBlog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...

KMPlayer 3.0.0.1440 - '.avi' File Local Denial of Service

source: https://www.securityfocus.com/bid/56322/info KMPlayer is prone to a local denial-of-service vulnerability. An local attacker can exploit this issue to crash the affected application, denying service to legitimate users. KMPlayer 3.0.0.1440 is vulnerable; other versions may also be affecte...

SMF - 'view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info SMF is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

BSW Gallery - uploadpic.php Arbitrary File Upload

BSW Gallery - uploadpic.php Arbitrary File Upload source: https://www.securityfocus.com/bid/56109/info BSW Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can...

BSW Gallery - 'uploadpic.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/56109/info BSW Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code a...

WANem - Multiple Cross-Site Scripting Vulnerabilities

WANem - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56326/info WANem is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...