ASP Forum Script - 'messages.asp?message_id' SQL Injection

source: https://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Basic-CMS - q Cross-Site Scripting

Basic-CMS - q Cross-Site Scripting source: https://www.securityfocus.com/bid/32531/info Basic CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

Ocean12 (Multiple Products) - Admin_ID SQL Injection

Ocean12 Multiple Products - AdminID SQL Injection source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

ParsBlogger - 'blog.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32529/info ParsBlogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Basic-CMS - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32531/info Basic CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

ParsBlogger - blog.asp Cross-Site Scripting

ParsBlogger - blog.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/32529/info ParsBlogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

AssoCIateD 1.4.4 - menu Cross-Site Scripting

AssoCIateD 1.4.4 - menu Cross-Site Scripting source: https://www.securityfocus.com/bid/32499/info AssoCIateD ACID is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32499/info AssoCIateD ACID is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

COms - dynamic.php Cross-Site Scripting

COms - dynamic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32459/info COMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

COms - 'dynamic.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32459/info COMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

Pilot Group PG Roommate Finder Solution - SQL Injection

Pilot Group PG Roommate Finder Solution - SQL Injection source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Softbiz Classifieds Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/32375/info Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Softbiz Classifieds Script - Cross-Site Scripting

Softbiz Classifieds Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/32375/info Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Easyedit CMS - news.php?intPageID SQL Injection

Easyedit CMS - news.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Easyedit CMS - page.php?intPageID SQL Injection

Easyedit CMS - page.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Kimson CMS - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32343/info Kimson CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Kimson CMS - id Cross-Site Scripting

Kimson CMS - id Cross-Site Scripting source: https://www.securityfocus.com/bid/32343/info Kimson CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

BoutikOne CMS - search_query Cross-Site Scripting

BoutikOne CMS - searchquery Cross-Site Scripting source: https://www.securityfocus.com/bid/32321/info BoutikOne CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow

VeryPDF PDFView - ActiveX Component Heap Buffer Overflow source: https://www.securityfocus.com/bid/32313/info The VeryPDF PDFView ActiveX control is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently...