2682 matches found
myBloggie 2.1.2/2.1.3 delcat.php cat_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17048/info MyBloggie is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
SCO Unixware 7.1 'pkg' commands Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/850/info Certain versions of SCO's Unixware only version 7.1 was tested ship with a series of package install/removal utilities which due to design issues under the SCO UnixWare operating system may read any file on the...
Wesnoth 1.x PythonAI Remote Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33971/info Wesnoth is prone to a remote code-execution vulnerability caused by a design error. Attackers can exploit this issue to execute arbitrary Python code in the context of the user running the vulnerable applicatio...
Invision Power Board 1.0/1.1/1.2 Admin.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8381/info Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in an Invision Power Board...
Global Centre Aplomb Poll 1.1 admin.php Madoa Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
CakePHP 1.1.7.3363 Vendors.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...
Simple PHP Blog 0.4 preview_cgi.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...
Joomla! and Mambo 'com_joomlavvz' Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27921/info The Joomla! and Mambo 'comjoomlavvz' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...
Microsoft Internet Explorer 6.0 - Local Resource Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11621/info Microsoft Internet Explorer is reported prone to a local resource enumeration vulnerability. It is reported that the vulnerability exists because when handling 'res://' requests for local resources, Internet...
MetaDot Portal Server 5.6.x index.pl Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9439/info A number of vulnerabilities have been found in all version of MetaDot Corporation's MetaDot Portal Server. Due to a failure of the software to properly validate user input, an attacker may be able to corrupt dat...
Seyeon Technology FlexWATCH Server 2.2 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9739/info It has been reported that FlexWATCH may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in a user's browser. These issues have been...
OpenDocMan 1.2.5 toBePublished.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
Bugzilla <= 3.1.4 '--attach_path' Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30661/info Bugzilla is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files...
Microsoft Content Management Server 2001 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5922/info Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. I...
AFFCommerce Shopping Cart 1.1.4 SubCategory.php cl Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query...
XFree86 X11R6 3.3.x Font Server Remote Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execute commands on the targ...
PowerPortal 1.3 - Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11681/info PowerPortal is reported vulnerable to remote SQL injection. This issue is due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query. PowerPortal 1.3 is...
Calacode @Mail Webmail 4.51 Filtering Engine HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21708/info Calacode @Mail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary script code in the victim's...
nginx 0.7.64 Terminal Escape Sequence in Logs Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37711/info The 'nginx' program is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in log files. Attackers can exploit this issue to execute arbitrary commands in a...
PowerPortal 1.1/1.3 Private Message HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10835/info A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data...