CuteNews 0.881.3.x - index.php Cross-Site Scripting

CuteNews 0.881.3.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11097/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue cou...

CuteNews 0.88/1.3.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11097/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious UR...

PhotoADay - Pad_selected Cross-Site Scripting

PhotoADay - Padselected Cross-Site Scripting source: https://www.securityfocus.com/bid/11009/info It is reported that PhotoADay is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could...

PhotoADay - 'Pad_selected' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11009/info It is reported that PhotoADay is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious U...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting...

Mantis Bug Tracker 0.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10994/info Mantis is a web-based bug tracking system. It is written in PHP and supported by a MySQL database. It is reported that Mantis is affected by cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly...

SCI Photo Chat 3.4.9 - Cross-Site Scripting

SCI Photo Chat 3.4.9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component...

SCI Photo Chat 3.4.9 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component of SCI Chat server will display an error...

CuteNews 1.3.1 - 'show_archives.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious UR...

CuteNews 1.3.1 - show_archives.php Cross-Site Scripting

CuteNews 1.3.1 - showarchives.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10948/info It is reported that CuteNews is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue...

CuteNews 0.88/1.3 - 'show_archives.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. The problems present themselves when malicious HTML an...

CuteNews 0.881.3 - example1.php Cross-Site Scripting

CuteNews 0.881.3 - example1.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. T...

dsm light Web file browser 2.0 - Directory Traversal

source: https://www.securityfocus.com/bid/10381/info DSM Light has been reported to be prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue would allow an attacker to view arbitrary, web-readable...

dsm light Web file browser 2.0 - Directory Traversal

dsm light Web file browser 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/10381/info DSM Light has been reported to be prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue woul...

PHPX 3.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10283/info It has been reported that PHPX is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. These issues could permit a remote attacker to creat...

Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10139/info It has been reported that Zaep AntiSpam is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI input. This issue could permit a remote attacker to create a...

Aborior Encore Web Forum - Arbitrary Command Execution

Aborior Encore Web Forum - Arbitrary Command Execution source: https://www.securityfocus.com/bid/10040/info Encore Web Forum is reported prone to an issue that may allow a remote user to execute arbitrary commands on a system implementing the forum software. This issue is due to the application's...

Aborior Encore Web Forum - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/10040/info Encore Web Forum is reported prone to an issue that may allow a remote user to execute arbitrary commands on a system implementing the forum software. This issue is due to the application's failure to properly validate user-supplied URI input. ...

Mambo Open Source 4.5 - index.php SQL Injection

Mambo Open Source 4.5 - index.php SQL Injection source: https://www.securityfocus.com/bid/9891/info It has been reported that the Mambo 'index.php' script is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. As...

Mambo Open Source 4.5 - 'index.php?mos_change_template' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9890/info It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. This issue could permit a remote attacker to...