showoff! digital media software 1.5.4 - Multiple Vulnerabilities

showoff! digital media software 1.5.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/13598/info ShowOff! Digital Media Software is affected by multiple vulnerabilities. These issues can allow an attacker to carry out directory traversal and denial of service attacks. ShowOff...

ZAPms 1.22 - nick SQL Injection

ZAPms 1.22 - nick SQL Injection source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

FestOS 2.3c - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/47751/info FestOS is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

PHPDug 2.0 - Multiple Cross-Site Scripting Vulnerabilities

PHPDug 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47733/info PHPDug is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

todoyu <= 2.0.8 XSS Vulnerability - Active Check

todoyu is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

LDAP Account Manager 3.4.0 - 'selfserviceSaveOk' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47674/info LDAP Account Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Tine 2.0 - 'vbook.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47669/info Tine is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

EGroupware <= 1.8.001 Multiple Vulnerabilities - Active Check

eGroupware is prone to a cross-site scripting XSS vulnerability and to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Football Website Manager 1.1 - SQL Injection Multiple HTML Injection Vulnerabilities

Football Website Manager 1.1 - SQL Injection Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/47593/info Football Website Manager is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize...

eyeOS 1.9.0.2 - Image File Handling HTML Injection

source: https://www.securityfocus.com/bid/47629/info eyeOS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input passed through image content before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the...

Dolibarr ERP/CRM 3.0 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/47542/info Dolibarr is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

Automagick Tube Script 1.4.4 - module Cross-Site Scripting

Automagick Tube Script 1.4.4 - module Cross-Site Scripting source: https://www.securityfocus.com/bid/47519/info Automagick Tube Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - jdeE1Menu.maf?jdeowpBackButtonProtect Cross-Site Scripting

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - jdeE1Menu.maf?jdeowpBackButtonProtect Cross-Site Scripting source: https://www.securityfocus.com/bid/47479/info Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these...

ChatLakTurk PHP Botlu Video - ara.php Cross-Site Scripting

ChatLakTurk PHP Botlu Video - ara.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47428/info ChatLakTurk PHP Botlu Video is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Viola DVR VIO-41000 - Multiple Directory Traversal Vulnerabilities

Viola DVR VIO-41000 - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/47509/info Viola DVR is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting the issues can allow an attacker to...

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - jdeE1Menu_Menu.mafService?e1.namespace Cross-Site Scripting

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - jdeE1MenuMenu.mafService?e1.namespace Cross-Site Scripting source: https://www.securityfocus.com/bid/47479/info Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these...

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/MafletClose.mafService?RENDER_MAFLET' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47479/info Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This m...

Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/E1Menu_OCL.mafService?e1.namespace' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47479/info Oracle JD Edwards EnterpriseOne is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This m...

CRESUS - 'recette_detail.php' SQL Injection

source: https://www.securityfocus.com/bid/47416/info CRESUS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...