pragmaMx 1.12.1 - includeswysiwygspaweditorpluginsimgpopupimg_popup.php?img_url Cross-Site Scripting

pragmaMx 1.12.1 - includeswysiwygspaweditorpluginsimgpopupimgpopup.php?imgurl Cross-Site Scripting source: https://www.securityfocus.com/bid/53669/info PragmaMX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

Ajaxmint Gallery 1.0 - Local File Inclusion

source: https://www.securityfocus.com/bid/53659/info Ajaxmint Gallery is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and to execute local scripts in the context of the webserver...

concrete5 index.php/tools/required/dashboard/sitemap_data.php Multiple Parameter XSS

concrete5 index.php/tools/required/dashboard/sitemapdata.php Multiple Parameter XSS. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple...

Concrete5 CMS FlashUploader - Arbitrary .SWF File Upload

Concrete5 CMS FlashUploader - Arbitrary .SWF File Upload source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload...

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

GetSimple CMS 3.1 admin/theme.php err Parameter Reflected XSS

GetSimple CMS 3.1 admin/theme.php err Parameter Reflected XSS. CVE-2012-6621. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53501/info GetSimple CMS is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Netop Remote Control DWS File Stack Buffer Overflow

Added: 05/11/2012 BID: 47631 OSVDB: 72291 Background NetOp Remote Control provides secure remote control and support for workstations, servers, embedded systems, and mobile devices. Problem NetOp Remote Control is vulnerable to stack buffer overflow as a result of failing to properly sanitize...

Kerio WinRoute Firewall < 6.0.0 Information Disclosure Vulnerability - Active Check

Kerio WinRoute Firewall is prone to a remote source code disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Chevereto 1.91 - Uploadengine.php?v Traversal Arbitrary File Enumeration

Chevereto 1.91 - Uploadengine.php?v Traversal Arbitrary File Enumeration source: https://www.securityfocus.com/bid/53448/info Chevereto Image Upload Script is prone to a cross-site scripting vulnerability and an information-disclosure vulnerability because it fails to properly sanitize...

PHP Enter 4.1.2 - 'banners.php' PHP Code Injection

source: https://www.securityfocus.com/bid/53426/info PHP Enter is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the...

SKYUC 3.2.1 - 'encode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53291/info SKYUC is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

MySQLDumper 1.24.4 - 'menu.php' PHP Remote Code Execution

source: https://www.securityfocus.com/bid/53310/info MySQLDumper is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary PHP code within the context of the...

MySQLDumper 1.24.4 - 'sql.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53306/info MySQLDumper is prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities. 2. A local file-include vulnerability. 3. Multiple cross-site request-forgery vulnerabilities. 4. Multiple...

Quick.CMS 4.0 - p Cross-Site Scripting

Quick.CMS 4.0 - p Cross-Site Scripting source: https://www.securityfocus.com/bid/53273/info Quick.CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Wireshark DECT Buffer Overflow Vulnerability - Mac OS X

Wireshark is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Joomla! Component CCNewsLetter 1.0.7 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/53208/info The CCNewsLetter module for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the applicatio...

Pendulab ChatBlazer 8.5 - 'Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53168/info ChatBlazer is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

MySQL 5.5.20 Unspecified RCE Vulnerability

MySQL is prone to an unspecified remote code execution RCE vulnerability. This VT has duplicated the VT MySQL SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

XOOPS 2.5.4 - tiny_mcepluginsxoopsimagemanagerxoopsimagebrowser.php Multiple Cross-Site Scripting Vulnerabilities

XOOPS 2.5.4 - tinymcepluginsxoopsimagemanagerxoopsimagebrowser.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53143/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...