Metropolis Technologies OfficeWatch Directory Traversal Vulnerability

Metropolis Technologies OfficeWatch is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. OpenVAS Vulnerability Test $Id:...

Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

DigPHP - dig.php Script Remote File Disclosure

DigPHP - dig.php Script Remote File Disclosure source: https://www.securityfocus.com/bid/54207/info DigPHP is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of...

Umapresence - Local File Inclusion Arbitrary File Deletion

Umapresence - Local File Inclusion Arbitrary File Deletion source: https://www.securityfocus.com/bid/54194/info Umapresence is prone to a local file-include vulnerability and an arbitrary file-deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. An...

FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Amazon S3 Uploadify Script - 'Uploadify.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info Amazon S3 Uploadify Script is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

CMS Lokomedia - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

CMS Lokomedia - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54150/info CMS Lokomedia is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploi...

CMS Lokomedia - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54150/info CMS Lokomedia is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of...

Cotonti - 'admin.php' SQL Injection

source: https://www.securityfocus.com/bid/54147/info Cotonti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modif...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

Joomla! Component com_szallasok - id SQL Injection

Joomla! Component comszallasok - id SQL Injection source: https://www.securityfocus.com/bid/54140/info The 'comszallasok' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful...

Adiscan LogAnalyzer 3.4.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/54117/info Adiscan LogAnalyzer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability is due to insufficient validation of user-supplied input that is received by the 64-bit Java applet that perfor...

Commentics - index.php Cross-Site Scripting

Commentics - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54111/info Commentics is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Coppermine Photo Gallery - index.php Script SQL Injection

Coppermine Photo Gallery - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54115/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may...

Coppermine Photo Gallery - 'index.php' Script SQL Injection

source: https://www.securityfocus.com/bid/54115/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

e107 Image Gallery Plugin - name Remote File Disclosure

e107 Image Gallery Plugin - name Remote File Disclosure source: https://www.securityfocus.com/bid/54096/info The Image Gallery Plugin for e107 is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability t...

AdaptCMS 2.0.2 - index.php Script Cross-Site Scripting

AdaptCMS 2.0.2 - index.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/54097/info AdaptCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

AdaptCMS 2.0.2 - 'index.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/54097/info AdaptCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure

WordPress Plugin Wp-ImageZoom - file Remote File Disclosure source: https://www.securityfocus.com/bid/54058/info Wp-ImageZoom for WordPress is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...