2326 matches found
Quick Classifieds 1.0 - controlpannel/alterCats.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Unclassified NewsBoard 1.5.3 Description Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14748/info Unclassified NewsBoard is prone to an HTML injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML a...
Ocean12 Membership Manager Pro Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13046/info Ocean12 Membership Manager Pro is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...
IBM Tivoli Continuous Data Protection for Files 3.1.4.0 Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34513/info IBM Tivoli Continuous Data Protection for Files is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...
ProjectApp 3.3 login.asp ret_page Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16011/info ProjectApp is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Magic Photo Storage Website user/add_news.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
MySQL <= 6.0.4 - Empty Binary String Literal Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31081/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle empty binary string literals. An attacker can exploit this issue to crash the application, denying access to legitimate user...
Shadowed Portal 5.7 Load.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17430/info Shadowed Portal is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrar...
SAP Business Objects Crystal Reports 7-10 'viewreport.asp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34341/info SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
ovidentia 5.6.x/5.8 options.php babInstallPath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files...
Microsoft Windows 2000 Remote CPU-overload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1415/info Sending a stream of binary zeros to any one of a number of Windows 2000 ports can cause 100% CPU utilization. The ports that were found vulnerable include TCP ports 7, 9, 21, 23, 7778 and UDP ports 53, 67, 68,...
phpShop Web Shopping Cart 0.6.1 -b Multiple Function XSS
No description provided by source. source: http://www.securityfocus.com/bid/9437/info Multiple vulnerabilities have been reported to exist in the software that may allow an attacker to carry out attacks against the database, disclose sensitive information, and execute HTML or script code in a...
Yahoo! Messenger 5.x/6.0 URL Handler Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13626/info Yahoo! Messenger is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote user can cause Yahoo! Messenger to disconnect through malicious emails or...
TikiWiki Project 1.8 tiki-list_faqs.php offset Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
Campsite 2.6.1 Log.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
Nenriki CMS 0.5 'ID' Cookie SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34067/info Nenriki CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Comersus Cart 5.0 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10824/info Comersus Cart is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL...
TSguestbook 2.1 Message Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, an...
PHP iCalendar 1.1/2.x year.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script cod...
PHP 4.x PHPInfo Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15248/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script cod...