TinyMCPUK - 'test' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56767/info TinyMCPUK is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

BigDump 0.29b and 0.32b - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56744/info BigDump is prone to a cross-site scripting vulnerability, an SQL-injection vulnerability, and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

WordPress Theme CStar Design - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56694/info The CStar Design theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, acce...

Forescout CounterACT - a Open Redirection

Forescout CounterACT - a Open Redirection source: https://www.securityfocus.com/bid/56687/info Forescout CounterACT is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks...

WordPress Plugin Ads Box - count SQL Injection

WordPress Plugin Ads Box - count SQL Injection source: https://www.securityfocus.com/bid/56681/info The Ads Box plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit thi...

Forescout CounterACT - 'a' Open Redirection

source: https://www.securityfocus.com/bid/56687/info Forescout CounterACT is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. Forescout CounterACT 6.3.4....

Beat Websites - id SQL Injection

Beat Websites - id SQL Injection source: https://www.securityfocus.com/bid/56683/info Beat Websites is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the...

WordPress Plugin Webplayer - id SQL Injection

WordPress Plugin Webplayer - id SQL Injection source: https://www.securityfocus.com/bid/56660/info The Webplayer plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to...

WordPress Plugin Plg Novana - id SQL Injection

WordPress Plugin Plg Novana - id SQL Injection source: https://www.securityfocus.com/bid/56661/info The Plg Novana plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to...

WordPress Plugin Webplayer - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56660/info The Webplayer plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify dat...

WordPress Theme Magazine Basic - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56664/info The Magazine Basic theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application,...

WordPress Plugin Plg Novana - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56661/info The Plg Novana plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify...

Splunk 4.3.1 - Denial of Service

Splunk 4.3.1 - Denial of Service source: https://www.securityfocus.com/bid/56581/info Splunk is prone to multiple cross-site scripting vulnerabilities and a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may leverage these issues to cause...

WordPress Plugin Tagged Albums - id SQL Injection

WordPress Plugin Tagged Albums - id SQL Injection source: https://www.securityfocus.com/bid/56569/info The Tagged Albums plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can...

WordPress Theme Dailyedition-mouss - id SQL Injection

WordPress Theme Dailyedition-mouss - id SQL Injection source: https://www.securityfocus.com/bid/56568/info The Dailyedition-mouss theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attack...

Friends in War The FAQ Manager - 'question' SQL Injection

source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application,...

WordPress Theme Dailyedition-mouss - 'id' SQL Injection

source: https://www.securityfocus.com/bid/56568/info The Dailyedition-mouss theme for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit this issue to compromise the applicatio...

WordPress Plugin PHP Event Calendar - cid SQL Injection

WordPress Plugin PHP Event Calendar - cid SQL Injection source: https://www.securityfocus.com/bid/56478/info The PHP Event Calendar plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An...

WordPress Plugin Eco-annu - eid SQL Injection

WordPress Plugin Eco-annu - eid SQL Injection source: https://www.securityfocus.com/bid/56479/info The Eco-annu plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit th...

Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability

Cisco Secure Access Control System ACS contains a vulnerability that could allow an unauthenticated, remote attacker to bypass TACACS+ based authentication service offered by the affected product. The vulnerability is due to improper validation of the user-supplied password when TACACS+ is the...