OXID eShop Community Edition Unauthorized Write Access Vulnerability

This host is installed with OXID eShop Community Edition and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthwritevuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Write Access Vulnerability Authors: Nikita M...

OXID eShop Community Edition Privilege Escalation Vulnerability

This host is installed with OXID eShop Community Edition and is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopprivescalationvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Privilege Escalation Vulnerability Authors: Nikita MR...

Buildbot 'waterfall.py' Cross-Site Scripting Vulnerability

This host is installed with Buildbot and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbbuildbotwaterfallxssvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Buildbot 'waterfall.py' Cross-Site Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

OXID eShop Community Edition Unauthorized Access Vulnerability

This host is installed with OXID eShop and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: secpodoxideshopunauthaccessvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ OXID eShop Community Edition Unauthorized Access Vulnerability Authors: Nikita MR Copyright: Copyright ...

tourismscripts HotelBook - hotel_id Multiple SQL Injections

tourismscripts HotelBook - hotelid Multiple SQL Injections source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

phpAuction 3.2 - 'lan' Remote File Inclusion

source: https://www.securityfocus.com/bid/36211/info phpAuction is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible...

Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43163/info Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Omnistar Recruiting - resume_register.php Cross-Site Scripting

Omnistar Recruiting - resumeregister.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43163/info Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

DvBBS 2.0 - boardrule.php SQL Injection

DvBBS 2.0 - boardrule.php SQL Injection source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thi...

Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

MKPortal 1.x (Multiple Modules) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/36216/info Multiple modules of MKPortal are prone to cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/36218/info MKPortal is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacke...

Tukanas Classifieds 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Free Arcade Script 1.0 - search Cross-Site Scripting

Free Arcade Script 1.0 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...

PHP 4.x, 5.2.6 DoS Vulnerability

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Free Arcade Script 1.0 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Smart ASP Survey - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/43370/info Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

VideoGirls - view.php?p Cross-Site Scripting

VideoGirls - view.php?p Cross-Site Scripting source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...