CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion

CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...

Jax Guestbook 3.50 - Page Cross-Site Scripting

Jax Guestbook 3.50 - Page Cross-Site Scripting source: https://www.securityfocus.com/bid/17560/info Jax Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed ...

Chipmunk Guestbook 1.3 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17483/info Chipmunk Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

Indexu 5.0 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/17470/info The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remot...

PHPSelect Submit-A-Link - HTML Injection

PHPSelect Submit-A-Link - HTML Injection source: https://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...

BlankNBerg 0.2 - Directory Traversal

BlankNBerg 0.2 - Directory Traversal source: https://www.securityfocus.com/bid/17345/info Blank'N'Berg is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retriev...

VNews 1.2 - Multiple SQL Injections

VNews 1.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/17316/info VNews is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

PHPCOIN 1.2 - 'mod_print.php?fs' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17279/info phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...

EZHomePagePro 1.5 - users_search.asp Multiple Cross-Site Scripting Vulnerabilities

EZHomePagePro 1.5 - userssearch.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17236/info EZHomePagePro is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

DSLogin 1.0 - index.php Multiple SQL Injections

DSLogin 1.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

Maian Weblog 2.0 - 'mail.php' SQL Injection

source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQL logic into the vulnerable...

Cholod MySQL Based Message Board - Mb.cgi SQL Injection

Cholod MySQL Based Message Board - Mb.cgi SQL Injection source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

F5 Firepass 4100 SSL VPN - Cross-Site Scripting

F5 Firepass 4100 SSL VPN - Cross-Site Scripting source: https://www.securityfocus.com/bid/17175/info FirePass 4100 SSL VPN is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

phpWebSite 0.8.20.8.3 - friend.php?sid SQL Injection

phpWebSite 0.8.20.8.3 - friend.php?sid SQL Injection source: https://www.securityfocus.com/bid/17150/info phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A...

phpWebSite 0.8.20.8.3 - article.php?sid SQL Injection

phpWebSite 0.8.20.8.3 - article.php?sid SQL Injection source: https://www.securityfocus.com/bid/17150/info phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A...

phpWebSite 0.8.2/0.8.3 - 'article.php?sid' SQL Injection

source: https://www.securityfocus.com/bid/17150/info phpWebSite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

Invision Power Board (IP.Board) 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 2.0.4 - Search Action Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17144/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...

Invision Power Services Invision Board 2.0.4 - Members Action Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17144/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18122/info vCard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

txtForum 1.0.3/1.0.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17054/info txtForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...