allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15935/info Allinta CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

Binary Board System 0.2.5 - reply.pl Multiple Cross-Site Scripting Vulnerabilities

Binary Board System 0.2.5 - reply.pl Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15913/info binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

PHP Arena PAFileDB Extreme Edition - SQL Injection

source: https://www.securityfocus.com/bid/15912/info PAFileDB Extreme Edition is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

Kryptronic ClickCartPro 5.15.2 - CP-APP.cgi Cross-Site Scripting

Kryptronic ClickCartPro 5.15.2 - CP-APP.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/15896/info Kryptronic ClickCartPro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

ASPBB 0.4 - profile.asp?PROFILE_ID SQL Injection

ASPBB 0.4 - profile.asp?PROFILEID SQL Injection source: https://www.securityfocus.com/bid/15859/info ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

CourseForum Technologies ProjectForum 4.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15850/info ProjectForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed ...

ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection

source: https://www.securityfocus.com/bid/15859/info ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

EveryAuction 1.53 - Auction.pl Cross-Site Scripting

EveryAuction 1.53 - Auction.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/15824/info EveryAuction is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to run arbitrary script code in the...

PHPWebGallery 1.3.4/1.5.1 - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

PHPWebGallery 1.3.4/1.5.1 - 'comments.php' SQL Injection

source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

Magic Book Professional 2.0 - Book.cfm Cross-Site Scripting

Magic Book Professional 2.0 - Book.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/15805/info Magic Book Professional is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

BTGrup Admin WebController - SQL Injection

source: https://www.securityfocus.com/bid/15819/info BTGrup Admin WebController is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application,...

CF_Nuke 4.6 - 'index.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15778/info CFNuke is prone to multiple cross-site scripting vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

CF_Nuke v4.6 Multiple vuln.

CFNuke v4.6 Multiple vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html vendor:http://www.mycfnuke.com/ affected version:v4.6 and prior Product Description: CFNuke is a free easy-to-setup & easy-to-use open source...

Cars Portal 1.1 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15747/info Cars Portal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

ASPS Shopping Cart Lite 2.1/Professional 2.9 d - 'adv_search.asp?srch_product_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15694/info ASPS Shopping Cart is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

WSN Knowledge Base 1.2 - comments.php?id SQL Injection

WSN Knowledge Base 1.2 - comments.php?id SQL Injection source: https://www.securityfocus.com/bid/15656/info WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQ...

DMANews 0.9 - Multiple SQL Injections

DMANews 0.9 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15628/info DMANews is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP Upload Center - index.php Directory Traversal

PHP Upload Center - index.php Directory Traversal source: https://www.securityfocus.com/bid/15621/info PHP Upload Center is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this issue to retrieve arbitrary...

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...