phpBB < 2.0.10 Multiple XSS

The remote host is running a version of phpBB older than 2.0.10. phpBB contains a flaw that allows a remote cross-site scripting attack. This flaw exists because the application does not validate user-supplied input in the 'searchauthor' parameter. This version is also vulnerable to an HTTP...

Zen Cart login.php SQL Injection Vulnerability

Overview: "Zen Cart™ truly is the art of e-commerce; a free, user-friendly, open source shopping cart system." Description: An input validation vulnerability has been reported in Zen Cart, allowing a remote user to inject SQL commands. The '/admin/login.php' file does not properly validate...

CVE-2003-0781

Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords...

OpenBB 1.0.x - 'post.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...

RhinoSoft Serv-U FTP Server 3.x/4.x/5.0 - 'LIST' Buffer Overflow

source: https://www.securityfocus.com/bid/10181/info Reportedly Serv-U is affected by a remote buffer overflow vulnerability in the list parameter. This issue is due to a failure of the application to properly validate buffer boundaries during processing of user input. Successful exploitation wou...

RhinoSoft Serv-U FTP Server 3.x4.x5.0 - LIST Buffer Overflow

RhinoSoft Serv-U FTP Server 3.x4.x5.0 - LIST Buffer Overflow source: https://www.securityfocus.com/bid/10181/info Reportedly Serv-U is affected by a remote buffer overflow vulnerability in the list parameter. This issue is due to a failure of the application to properly validate buffer boundaries...

BlackBoard Learning System 5.x/6.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10101/info Blackboard Learning System has been reported prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly validate user supplied URI input. The first issue is reported to affect the...

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting

FloosieTek FTGate Mail Server 1.2 - index.fts?folder Cross-Site Scripting source: https://www.securityfocus.com/bid/10058/info It has been reported that FTGate is prone to multiple remote input validation vulnerabilities; a cross-site scripting issue and an HTML injection vulnerability. These...

Invision Gallery SQL Injection Vulnerabilities

Vendor : Invision Power Services URL : http://www.invisiongallery.com Version : Invision Gallery 1.0.1 Risk : SQL Injection Vulnerabilities Description: Invision Gallery is a fully featured, powerful gallery system that is easy and fun to use! It plugs right into your existing Invision Power Boar...

PicoPhone Internet Phone 1.63 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/9969/info It has been reported that Picophone is prone to a remote buffer overflow vulnerability. This issue is due to the application failing to verify the size of user input before storing it in a finite buffer. Successful exploitation of this issue wil...

DSA-467 ecartis - several vulnerabilities

Bulletin has no description...

invision101PSsql.txt

Vendor : Invision Power Services URL : http://www.invisiongallery.com Version : Invision Gallery 1.0.1 Risk : SQL Injection Vulnerabilities Description: Invision Gallery is a fully featured, powerful gallery system that is easy and fun to use! It plugs right into your existing Invision Power Boar...

PHP-Nuke Error Manager Module 2.1 - 'error.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issues may be leveraged to carry out...

PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure

PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional...

PHP-Nuke Error Manager Module 2.1 - 'error.php?language' Full Path Disclosure

source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issues may be leveraged to carry out...

PHP-Nuke Error Manager Module 2.1 - error.php Multiple Cross-Site Scripting Vulnerabilities

PHP-Nuke Error Manager Module 2.1 - error.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle...

Mambo Open Source 4.5 - index.php?mos_change_template Cross-Site Scripting

Mambo Open Source 4.5 - index.php?moschangetemplate Cross-Site Scripting source: https://www.securityfocus.com/bid/9890/info It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly...

Mambo Open Source 4.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9890/info It has been reported that the Mambo 'index.php' script is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. This issue could permit a remote attacker to...

WarpSpeed 4nAlbum Module 0.92 - modules.php?gid SQL Injection

WarpSpeed 4nAlbum Module 0.92 - modules.php?gid SQL Injection source: https://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is an information...

YABB SE 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9873/info It has been reported that YaBB and YaBB SE are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the applications to properly validate URI supplied user input. Attackers may exploit this vulnerability t...