Cotonti 0.9.2 - Multiple SQL Injections

Cotonti 0.9.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48028/info Cotonti is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacke...

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47786/info poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

BMC Dashboards 7.6.01 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/47731/info BMC Dashboards is prone to to multiple information-disclosure and cross-site scripting issues because the application fails to properly sanitize user-supplied input. A remote attacker may leverage the cross-site scripting issues to execute...

HTB22965: Multiple XSS vulnerabilities in BackupPC

Vulnerability ID: HTB22965 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinbackuppc.html Product: BackupPC Vendor: Craig Barratt http://backuppc.sourceforge.net/ Vulnerable Version: 3.1.0, perhaps 3.2.0 also vulnerable Vendor Notification: 14 April 2011 Vulnerability Type:...

phpList 2.10.13 Cross Site Request Forgery / Cross Site Scripting

============================== Vulnerability ID: HTB22956 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinphplist.html Product: phpList Vendor: Tincan Ltd http://www.phplist.com/ Vulnerable Version: 2.10.13 and probably prior versions Vendor Notification: 12 April 2011 Vulnerabilit...

Dolibarr ERPCRM 3.0 - Local File Inclusion Cross-Site Scripting

Dolibarr ERPCRM 3.0 - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/47542/info Dolibarr is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

Technicolor THOMSON TG585v7 Wireless Router - url Cross-Site Scripting

Technicolor THOMSON TG585v7 Wireless Router - url Cross-Site Scripting source: https://www.securityfocus.com/bid/47390/info Technicolor THOMSON TG585v7 Wireless Router is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker...

EZ-Shop 1.02 - Lateral SQL Injection

Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com Contact osirysatautisticidotorg Greets to...

Etki Video PRO 2.0 - izle.asp?id SQL Injection

Etki Video PRO 2.0 - izle.asp?id SQL Injection source: https://www.securityfocus.com/bid/47298/info Etki Video Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

Longshine Multiple Print Servers - Cross-Site Scripting

GotGeek Labs http://www.gotgeek.com.br/ Longshine Multiple Print Servers Cross-site Scripting Vulnerability + Description LCS-PS110: The LCS-PS110 Parallel-Port-Printserver enables you to share your printer in the whole network from every workstation. This multiprotocol printserver supports the...

InTerra Blog Machine 1.84 - Cross-Site Scripting

Vulnerability ID: HTB22931 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininterrablogmachin e.html Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 201...

GuppY 4.6.14 - lng Multiple SQL Injections

GuppY 4.6.14 - lng Multiple SQL Injections source: https://www.securityfocus.com/bid/47086/info GuppY is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

NewsPortal 'post.php' Cross Site Scripting Vulnerability

NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

xtcModified 1.05 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities

xtcModified 1.05 - Multiple HTML Injection Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46681/info xtcModified is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful...

ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities

ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/46256/info ViArt Shop is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Moodle 'PHPCOVERAGE_HOME' Cross Site Scripting Vulnerability

Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross- site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker m...

All In One Control Panel 1.4.1 - cp_menu_data_file.php SQL Injection

All In One Control Panel 1.4.1 - cpmenudatafile.php SQL Injection source: https://www.securityfocus.com/bid/46097/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. ...

PRTG Network Monitor 'errormsg' Parameter Multiple Cross Site Scripting Vulnerabilities

PRTG Network Monitor is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may le...

CompactCMS Multiple Cross Site Scripting Vulnerabilities

CompactCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied script code may be executed in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials...

phpCMS 2008 V2 - 'data.php' SQL Injection

source: https://www.securityfocus.com/bid/45913/info PHPCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...