15458 matches found
PHCDownload 1.1 - upload/install/index.php step Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...
CPanel 10.9.1 Resname Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25047/info cPanel is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...
PHCDownload 1.1 search.php string Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
PHP 5.2.5 Multiple GetText Functions Denial Of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26428/info PHP is prone to multiple denial-of-service vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues to cause denial-of-service conditions...
Soft4e ECW-Cart 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15890/info ECW-Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
PHPLive! 3.2.2 chat.php sid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/24276/info PHP Live! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the brows...
Direct News 4.9 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15957/info Direct News is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
PsychoStats 3.0.6b Multiple Scripts Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24106/info PsychoStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
singapore 0.9.x/0.10 index.php template Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18518/info singapore gallery is prone to directory-traversal and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit...
MidiRecord2 MidiRecord.CC Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19190/info Midirecord is prone to a local buffer-overflow vulnerability because it fails to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker can exploit this issue to...
Oracle Portal 9.0.2 Calendar.JSP Multiple HTTP Response Splitting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21686/info Oracle Portal is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit these vulnerabilities to influenc...
Klf-Realty 2.0 detail.asp property_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Password Door 8.4 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...
KEIL Software photokorn 1.542 - 'index.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29808/info KEIL Software's photokorn is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, acces...
uPhotoGallery 1.1 thumbnails.asp ci Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21319/info uPhotoGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
ActiveNews Manager activenews_search.asp query Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21167/info Active News Manger is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploitin...
HTTP 1.1 GET Request Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and...
Doomsday 1.8/1.9 - Multiple Remote Format String Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17369/info Doomsday is prone to multiple remote format-string vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute...
AWStats 6.8 'awstats.pl' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30730/info AWStats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...
Mambo/Joomla 'com_buslicense' Component - 'aid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27508/info The 'combuslicense' component for Mambo/Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...