10644 matches found
Happymall E-Commerce Software 4.3/4.4 Normal_HTML.CGI File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7559/info IT has been reported that Happymall E-Commerce is prone to a file disclosure vulnerability. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible fo...
VLC Media Player < 1.1.4 (.xspf) smb:// URI Handling Remote Stack Overflow PoC
No description provided by source. !/usr/bin/python Exploit Title: VLC Media Player 1.1.4 .xspf smb:// URI Handling Remote Stack Overflow PoC Date: 04-09-2010 Author: Hadji Samir , s-Dzathotmaildotfr Software Link:...
CityPost PHP Image Editor M4 URI Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13260/info CityPost Image Cropper/Resizer is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'image-editor-52.php' script...
PHP-Nuke 6.x/7.x Your_Account Module Avatarcategory Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13010/info It is reported that the PHP-Nuke 'YourAccount' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...
WordPress 1.2.1/1.2.2 moderation.php item_approved Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site...
cPanel 5/6/7/8/9 Resetpass Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9848/info A potential remote command execution vulnerability has been discovered in the cPanel Application. This issue occurs due to insufficient sanitization of externally supplied data to the script that handles resetti...
PSCS VPOP3 2.0 Email Server Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10782/info It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the 'msglistlen' parameter ...
UC Gateway Investment SiteEngine 5.0 'api.php' URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style attacks. SiteEngine 5.0 is...
Android 'content://' URI - Multiple Information Disclosure Vulnerabilities
No description provided by source. ?php / Description: Android 'content://' URI Multiple Information Disclosure Vulnerabilities Bugtraq ID: 48256 CVE: CVE-2010-4804 Affected: Android 2.3.4 Author: Thomas Cannon Discovered: 18-Nov-2010 Advisory:...
OSCommerce 2.1/2.2 Info_Message Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7153/info It has been reported that osCommerce does not sufficiently filter URI parameters supplied to multiple osCommerce scripts. As a result of this deficiency, it is possible for a remote attacker to create a maliciou...
Apache ActiveMQ 5.2/5.3 Source Code Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39636/info Apache ActiveMQ is prone to a vulnerability that lets attackers access source code because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary fil...
SAP Business Connector 4.6/4.7 adapter-index.dsp url Variable Arbitrary Site Redirect
No description provided by source. source: http://www.securityfocus.com/bid/16671/info SAP Business Connector is susceptible to an input-validation vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input. This issue allows remote attackers to execute...
RSA Authentication Agent for Web 5.3 - URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28907/info RSA Authentication Agent for Web is prone to a remote URI-redirection vulnerability because the application fails to adequately sanitize user-supplied input. A successful attack may aid in phishing-style attack...
Mongoose 2.8 Space String Remote File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context ...
SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC
No description provided by source. !/usr/bin/perl SopCast 3.4.7 sop:// URI Handling Remote Stack Buffer Overflow PoC Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video an...
PHP 4/5 Input/Output Wrapper Remote Include Function Command Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10427/info PHP is reportedly affected by an arbitrary command-execution weakness through the PHP 'include' function. This issue is due to a design error that allows the execution of attacker-supplied POST PHP commands whe...
Siteman 1.1 User Database Privilege Escalation Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/12304/info Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker can supply...
SCI Photo Chat 3.4.9 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10648/info SCI Photo Chat is reported susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. The web server component of SCI Ch...
PhpGedView 2.5/2.6 Individual.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11882/info It is reported that PhpGedView is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remo...
PHP-Wiki 1.2/1.3 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5254/info PHP-Wiki does not sufficiently sanitize HTML from URI parameters, making it prone to cross-site scripting attacks. An attacker may exploit this condition by enticing users to visit a malicious link which contain...