MapCal 0.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/31304/info MapCal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

6rbScript - 'cat.php' SQL Injection

source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

BlueCUBE CMS - tienda.php SQL Injection

BlueCUBE CMS - tienda.php SQL Injection source: https://www.securityfocus.com/bid/31323/info BlueCUBE CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

eXtrovert software Thyme 1.3 - add_calendars.php Cross-Site Scripting

eXtrovert software Thyme 1.3 - addcalendars.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31287/info Thyme is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

Achievo 1.3.2 - atknodetype Cross-Site Scripting

Achievo 1.3.2 - atknodetype Cross-Site Scripting source: https://www.securityfocus.com/bid/31326/info Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Parallels H-Sphere 3.03.1 - login.php Multiple Cross-Site Scripting Vulnerabilities

Parallels H-Sphere 3.03.1 - login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31256/info H-Sphere is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Cars Vehicle - page.php SQL Injection

Cars Vehicle - page.php SQL Injection source: https://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Quick Cart 3.1 - admin.php Cross-Site Scripting

Quick Cart 3.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

QuicO - photo.php SQL Injection

QuicO - photo.php SQL Injection source: https://www.securityfocus.com/bid/31154/info QuicO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities

Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31152/info Paranews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31151/info Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31151/info Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Nooms 1.1 - smileys.php?page_id Cross-Site Scripting

Nooms 1.1 - smileys.php?pageid Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Nooms 1.1 - search.php?q Cross-Site Scripting

Nooms 1.1 - search.php?q Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code i...

Nooms 1.1 - 'search.php?q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31110/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31107/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...

Hot Links SQL-PHP - news.php SQL Injection

Hot Links SQL-PHP - news.php SQL Injection source: https://www.securityfocus.com/bid/31118/info Hot Links SQL-PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

AvailScript Job Portal Script - applynow.php SQL Injection

AvailScript Job Portal Script - applynow.php SQL Injection source: https://www.securityfocus.com/bid/31101/info AvailScript Job Portal Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31060/info Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...