Cezanne 6.5.17 - cflookup.asp Multiple Cross-Site Scripting Vulnerabilities

Cezanne 6.5.17 - cflookup.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may levera...

Swiki 1.5 - HTML Injection Cross-Site Scripting

Swiki 1.5 - HTML Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/28680/info Swiki is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execu...

alamthal-sql.txt

Default.ASPX SQL Injection Vulnerability: Al-Amthal HRMS Solution-Optimum Remote: Yes Local: Yes Class: Input Validation Error Critical: Moderately critical URL: http://www.example.com/optimum/default.aspx?page=Search&app=Search&srch=sql sql=-1//UNION//ALL//SELECT//1,2 Published: April 6, 2008...

phpMyChat 0.14.5 - setup.php3 Cross-Site Scripting

phpMyChat 0.14.5 - setup.php3 Cross-Site Scripting source: https://www.securityfocus.com/bid/28399/info phpMyChat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Apple Mac OSX Server 10.5 - Wiki Server Directory Traversal

Apple Mac OSX Server 10.5 - Wiki Server Directory Traversal source: https://www.securityfocus.com/bid/28278/info Apple Mac OS X Server Wiki Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an...

Uberghey CMS 0.3.1 - index.php Multiple Local File Inclusions

Uberghey CMS 0.3.1 - index.php Multiple Local File Inclusions source: https://www.securityfocus.com/bid/28217/info Uberghey CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an attacker to acces...

WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28139/info WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

TorrentTrader 1.08 - msg HTML Injection

TorrentTrader 1.08 - msg HTML Injection source: https://www.securityfocus.com/bid/28082/info TorrentTrader is prone to an HTML-injection vulnerability because it fails to adequately sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected...

TorrentTrader 1.08 - 'msg' HTML Injection

source: https://www.securityfocus.com/bid/28082/info TorrentTrader is prone to an HTML-injection vulnerability because it fails to adequately sanitize user-supplied input. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to...

Flicks Software AuthentiX 6.3b1 - Username Multiple Cross-Site Scripting Vulnerabilities

Flicks Software AuthentiX 6.3b1 - Username Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28040/info Flicks Software AuthentiX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker...

Packeteer PacketShaper and PolicyCenter 8.2.2 - FILELIST Cross-Site Scripting

Packeteer PacketShaper and PolicyCenter 8.2.2 - FILELIST Cross-Site Scripting source: https://www.securityfocus.com/bid/27982/info Packeteer PacketShaper and PolicyCenter are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied input data. An...

Joomla! 'mosConfig_absolute_path' Parameter Remote File Include

The version of Joomla! running on the remote host is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'mosConfigabsolutepath' parameter before using it in the index.php script to include PHP code. Provided 'RGEMULATION' is not defined in t...

Sentinel Protection Server 7.x/Keys Server 1.0.x - Backslash Directory Traversal

source: https://www.securityfocus.com/bid/27735/info Sentinel Protection Server and Keys Server are prone to a directory-traversal vulnerability because the software fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive informatio...

HispaH YouTube Clone - load_message.php Cross-Site Scripting

HispaH YouTube Clone - loadmessage.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

WebCalendar 1.1.6 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27461/info WebCalendar is prone to multiple HTML-injection and cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

PHCDownload 1.1 - 'search.php?string' SQL Injection

source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

IPortalX - '/forum/login_user.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27044/info iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

1024 CMS 1.3.1 - Local File Inclusion / SQL Injection

vuln.: 1024 CMS 1.3.1 LFI/SQL Multiple Vulnerabilities script info and download: http://www.1024cms.com author: irk4zatyahoo.pl greets to: str0ke, wacky '-----------------------------------------------------------------------------' sql-injection: code: /admin/ops/findip/ajax/search.php: ... 8...

iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. This issue affects iSupport 1.8;...