2326 matches found
Digital Reality Game Engine 1.0.x Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9736/info It has been reported that the Digital Reality Game engine is prone to a remote denial of service vulnerability. This issue is due to a failure of the application to validate packet data size input supplied by a...
Tmax Soft JEUS 3.1.4 p1 URL.JSP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7969/info Reportedly, Tmax Soft JEUS is vulnerable to a cross site-scripting attack. The vulnerability is present in the url.jsp script of the Tmax Soft JEUS server. An attacker may exploit this vulnerability by enticing ...
Yap Blog 1.1 - 'index.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28120/info Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlyi...
BBC Education Betsie 1.5 Parserl.PL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5135/info Betsie BBC Education Text to Speech Internet Enhancer is prone to a cross-site scripting vulnerability. This issue exists in the parserl.pl script. Attackers may exploit this condition via a malicious link to a...
Webfroot Shoutbox 2.32 Expanded.PHP Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php script...
SoftMaker Shop 0 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16471/info SoftMaker Shop is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary...
Mapos-Scripts.de Gastebuch 1.5 Index.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25252/info Mapos-Scripts.de Gastebuch is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remo...
MyBB 1.1.7 - Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19718/info MyBB is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would...
SleeperChat 0.3f Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16363/info SleeperChat is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
EZHomePagePro 1.5 users_search.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17236/info EZHomePagePro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...
PHPJabbers Post Comments 3.0 Cookie Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31467/info PHPJabbers Post Comments is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this...
Simple PHP Scripts gallery 0.x - index.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Woltlab Burning Board 2.x Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18423/info Woltlab Burning Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...
t. hauck jana webserver 1.0/1.45/1.46 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/699/info The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL. If the request is made in specific formats, the server will send out files outside of the intended webroot. http...
Check Point Software Firewall-1 4.1 SP2 Fast Mode TCP Fragment Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2143/info Check Point Software's VPN-1 and Firewall-1 products contain a vulnerability in their Fast Mode option that may allow an attacker to bypass access control restrictions and access certain blocked services. Fast...
AZ Photo Album Script Pro Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18306/info AZ Photo Album Script Pro is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...
Mozilla Thunderbird 1.5 Address Book Import Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16716/info Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. The issue presents itself when the application handles a specially crafted address book file. Mozilla Thunderbird 1.5 is reportedly...
Black Knight Forum 4.0 Member.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful...
Kayako SupportSuite 3.0.32 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20954/info Kayako SupportSuite is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
CPanel 11 Beta Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21287/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...