PHPFinance 0.6 - '/group.php' SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42230/info PHPFinance is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the...

Joomla! Component com_jigsaw - Controller Directory Traversal

Joomla! Component comjigsaw - Controller Directory Traversal source: https://www.securityfocus.com/bid/42144/info The 'comjigsaw' component for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an...

Whizzy CMS 'whizzycms1001.php' Local File Include Vulnerability

Whizzy CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allo...

MapServer < 4.10.6, 5.x < 5.6.4 Multiple Vulnerabilities

MapServer is prone to multiple remote vulnerabilities, including a buffer overflow vulnerability and an unspecified security vulnerability affecting the CGI command line debug arguments. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability

Mongoose Web Server is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Tenable Nessus Web Server < 1.2.4 Plugin Unspecified XSS Vulnerability

Tenable Nessus Web Server is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter - Local Stack Buffer Overflow

Exploit Title: Mini-stream RM-MP3 Converter/WMDownloader/ASX to MP3 Converter Stack Buffer Overflow Exploit Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK https://www.securityfocus.com/bid/34494 The way exploit written is slightly different than above Vulnerability Refer:...

KVIrc 4.0 - '\r' Carriage Return in DCC Handshake Remote Command Execution

source: https://www.securityfocus.com/bid/42026/info KVIrc is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to execute arbitrary commands within the context of the affected...

SPIP 2.1 - 'var_login' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42060/info SPIP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Joomla! Component FreiChat 1.02.x - HTML Injection

Joomla! Component FreiChat 1.02.x - HTML Injection source: https://www.securityfocus.com/bid/41961/info Joomla! FreiChat component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

vBulletin 'faq.php' Information Disclosure Vulnerability

vBulletin is prone to an information-disclosure vulnerability. Successful exploits can allow attackers to obtain potentially sensitive information which may aid in other attacks. vBulletin 3.8.6 is affected; prior versions may also be vulnerable. OpenVAS Vulnerability Test $Id:...

vBulletin <= 3.8.6 'faq.php' Information Disclosure Vulnerability - Active Check

vBulletin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow

Mozilla Firefox and SeaMonkey Plugin Parameters - Remote Buffer Overflow source: https://www.securityfocus.com/bid/41842/info Mozilla Firefox and SeaMonkey are prone to a buffer-overflow vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page...

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting

PHPWCMS 1.4.5 - PHPwcms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

DSite CMS 4.81 - 'modmenu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41724/info DSite CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHPWCMS 1.4.5 - 'PHPwcms.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41720/info phpwcms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Sun Java System Application Server Local Vulnerability

Sun Java System Application Server is prone to a local vulnerability. The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP Bible Search 'bible.php' SQL Injection and Cross Site Scripting Vulnerabilities

PHP Bible Search is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

dotDefender 4.02 - 'clave' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41541/info dotDefender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/41564/info The Download Manager module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to uploa...