Astaro Security Gateway 8.1 - HTML Injection

source: https://www.securityfocus.com/bid/51301/info Astaro Security Gateway is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...

cPanel WebHost Manager (WHM) - '/webmail/x3/mail/clientconf.html?acct' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57060/info cPanel and WHM are prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

cPanel - dir Cross-Site Scripting

cPanel - dir Cross-Site Scripting source: https://www.securityfocus.com/bid/57064/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

cPanel - 'dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57064/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

cPanel - 'account' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57045/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

EZHomeTech EzServer Stack Buffer Overflow

A stack buffer overflow vulnerability has been reported in EZhome Teck EzServer. The vulnerability is due to a bound checking error when processing specially crafted user-supplied input. A remote attacker can trigger the vulnerability by sending a specially crafted request to the server. Successf...

City Reviewer - 'search.php' Script SQL Injection

source: https://www.securityfocus.com/bid/57049/info City Reviewer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

nagios -- buffer overflow in history.cgi

full disclosure reports: history.cgi is vulnerable to a buffer overflow due to the use of sprintf with user supplied data that has not been restricted in size...

Joomla! Component com_bit - Controller Local File Inclusion

Joomla! Component combit - Controller Local File Inclusion source: https://www.securityfocus.com/bid/56995/info The Bit Component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

MyBB Transactions Plugin - transaction SQL Injection

MyBB Transactions Plugin - transaction SQL Injection source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can explo...

MyBB Transactions Plugin - 'transaction' SQL Injection

source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...

Cisco Wireless LAN Controller Cross-Site Request Forgery Vulnerability

Cisco Wireless LAN Controller WLC Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site request forgery attacks on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied input processed by the WLC management...

PHP Address Book - 'group' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56937/info PHP Address Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SimpleInvoices invoices Module - Customer Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/56882/info Simple Invoices is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will...

vBulletin ajaxReg Module - SQL Injection

source: https://www.securityfocus.com/bid/56877/info The ajaxReg module for vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

FOOT Gestion - id SQL Injection

FOOT Gestion - id SQL Injection source: https://www.securityfocus.com/bid/56862/info FOOT Gestion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

WordPress Theme Nest - codigo SQL Injection

WordPress Theme Nest - codigo SQL Injection source: https://www.securityfocus.com/bid/56792/info The Nest theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue...

WordPress Theme Nest - 'codigo' SQL Injection

source: https://www.securityfocus.com/bid/56792/info The Nest theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or...

Fortinet FortiWeb (Multiple Appliances) - Multiple Cross-Site Scripting Vulnerabilities

Fortinet FortiWeb Multiple Appliances - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56774/info Multiple Fortinet FortiWeb Appliances are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. A...

TinyMCPUK - test Cross-Site Scripting

TinyMCPUK - test Cross-Site Scripting source: https://www.securityfocus.com/bid/56767/info TinyMCPUK is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...