FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection

source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

Telekorn Signkorn Guestbook 1.x - adminindex.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminindex.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the...

IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting

IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an...

IDevSpot iSupport 1.8 - open_tickets.php?ticket_id Cross-Site Scripting

IDevSpot iSupport 1.8 - opentickets.php?ticketid Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow ...

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - adminconfig.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow th...

Vikingboard 0.1b - report.php Cross-Site Scripting

Vikingboard 0.1b - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Vikingboard 0.1 - topic.php SQL Injection

Vikingboard 0.1 - topic.php SQL Injection source: https://www.securityfocus.com/bid/19919/info Viking board is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This may allow an attacker to compromise the application, access or modify data, or...

Community Link Pro - 'login.cgi?File' Remote Command Execution

source: https://www.securityfocus.com/bid/14097/info Community Link Pro is prone to a remote arbitrary command execution vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. Due to this, an attacker can prefix arbitrary commands with the '|' character...

DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access...

CubeCart < 2.0.5 Multiple Vulnerabilities

The version of CubeCart on the remote host is vulnerable to a local file include issue, along with related cross-site scripting and path disclosure issues, due to a failure to sanitize user-supplied data. Successful exploitation of this issue may allow an attacker to execute arbitrary code on the...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and aris...

ZeroBoard < 4.1pl5 Multiple Remote Vulnerabilities

The remote host runs ZeroBoard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute...

WordPress 1.2.11.2.2 - link-manager.php Multiple Cross-Site Scripting Vulnerabilities

WordPress 1.2.11.2.2 - link-manager.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper...

WordPress 1.2.11.2.2 - link-add.php Multiple Cross-Site Scripting Vulnerabilities

WordPress 1.2.11.2.2 - link-add.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper...

WordPress 1.2.11.2.2 - moderation.php?item_approved Cross-Site Scripting

WordPress 1.2.11.2.2 - moderation.php?itemapproved Cross-Site Scripting source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization ...

WordPress 1.2.11.2.2 - link-categories.php?cat_id Cross-Site Scripting

WordPress 1.2.11.2.2 - link-categories.php?catid Cross-Site Scripting source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of...

WordPress Core 1.2.1/1.2.2 - &#039;link-categories.php?cat_id&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress Core 1.2.1/1.2.2 - &#039;/wp-admin/templates.php?file&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress Core 1.2.1/1.2.2 - &#039;link-add.php&#039; Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...