Lucene search
+L

2326 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

InnovaPortal msg.jsp msg Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/26084/info InnovaShop is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.40 views

PHPOutsourcing Zorum 3.x Remote Include Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrary PHP script containing commands...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

RamaCMS ADODB.Inc.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20523/info RamaCMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.213 views

PHPSavant Savant2 stylesheet.php mosConfig_absolute_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19151/info Savant2 is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

EncapsCMS 0.3.6 'common_foot.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22319/info EncapsCMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlyi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Omniture SiteCatalyst Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21620/info Omniture SiteCatalyst is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

osCommerce 2.2 admin/specials.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

XlentProjects SphereCMS 1.1 'archive.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38309/info SphereCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

Alt-N WebAdmin 2.0.x Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7439/info Reportedly, remote users can discover the installation directory of certain software on the underlying system by submitting an HTTP request to the WebAdmin server. This could allow an attacker to obtain sensitiv...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

W-Agora 4.0 - edit_forum.php bn_dir_default Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.21 views

Meet#Web 0.8 RegResource.class.php root_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.34 views

PHP 4.x/5.0.x File Upload GLOBAL Variable Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15250/info PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite the GLOBAL variable. This may...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

VBulletin <= 3.7.1 - admincp/faq.php Injection adminlog.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/30134/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

6.7AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.44 views

GlobalNoteScript 4.20 Read.CGI Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14148/info GlobalNoteScript is prone to a remote arbitrary command execution vulnerability. Reportedly, this issue arises when the user-specified 'file' URI parameter of the 'read.cgi' script is supplied to the Perl open...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

Centrinity FirstClass 5.77 0 Intranet Server Long Header Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1421/info If an E-mail containing an excessively long To: field in the header 1.5 MB is processed by First Class Intranet Services FCIS, a Denial of Service can occur. http://www.exploit-db.com/sploits/20052.tar.gz...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

EasyMoblog 0.5 Img.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17199/info EasyMoblog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

InstantASP 4.1 Logon.aspx SessionID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22052/info InstantForum.NET is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.16 views

ChiCoMaS 2.0.4 - 'index.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29025/info ChiCoMaS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.14 views

PHPTB Topic Board 2.0 index.php mid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14535/info PHPTB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. The consequences of this...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

MyBoard 1.0.12 - 'rep.php' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28823/info MyBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

7.1AI score
SaveExploits0
Rows per page
Query Builder