CMS Made Simple 0.10 - Lang.php Remote File Inclusion

CMS Made Simple 0.10 - Lang.php Remote File Inclusion source: https://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issu...

FlatNuke 2.5.6 - ID Directory Traversal

FlatNuke 2.5.6 - ID Directory Traversal source: https://www.securityfocus.com/bid/14702/info FlatNuke is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by...

Land Down Under 700/701/800/801 - 'events.php?c' SQL Injection

source: https://www.securityfocus.com/bid/14685/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

Foojan PHPWeblog - Html Injection

source: https://www.securityfocus.com/bid/14658/info Foojan PHPWeblog is prone to an HTML injection vulnerability. This is due to a lack of proper sanitization of user-supplied input. Attacker-supplied HTML and script code would be executed in the context of the affected Web site, potentially...

PostNuke 0.76 RC4b - user.php?htmltext Cross-Site Scripting

PostNuke 0.76 RC4b - user.php?htmltext Cross-Site Scripting source: https://www.securityfocus.com/bid/14635/info PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. This can lead to thef...

PostNuke 0.750.76 DL - viewdownload.php SQL Injection

PostNuke 0.750.76 DL - viewdownload.php SQL Injection source: https://www.securityfocus.com/bid/14636/info PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input. Successful exploitation could result in a compromise of th...

PostNuke 0.76 RC4b Comments Module - moderate Cross-Site Scripting

PostNuke 0.76 RC4b Comments Module - moderate Cross-Site Scripting source: https://www.securityfocus.com/bid/14635/info PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. This can lead ...

NEPHP 3.0.4 - browse.php Cross-Site Scripting

NEPHP 3.0.4 - browse.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14626/info nePHP is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied input. This vulnerability will allow a malicious user to perform attacks on an...

PostNuke 0.76 RC4b Comments Module - 'moderate' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14635/info PostNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. This can lead to theft of cookie-based authentication credentials, as well as oth...

PostNuke 0.75/0.76 DL - 'viewdownload.php' SQL Injection

source: https://www.securityfocus.com/bid/14636/info PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or...

Land Down Under 800 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/14619/info Land Down Under is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

W-Agora 4.2 - Site Directory Traversal

W-Agora 4.2 - Site Directory Traversal source: https://www.securityfocus.com/bid/14597/info W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by...

PHPTB Topic Board 2.0 - board_o.php?absolutepath Remote File Inclusion

PHPTB Topic Board 2.0 - boardo.php?absolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/14592/info PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting

source: https://www.securityfocus.com/bid/14569/info Apple Mac OS X Weblog Server is prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

PHPTB Topic Board 2.0 - 'index.php?mid' SQL Injection

source: https://www.securityfocus.com/bid/14535/info PHPTB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. The consequences of this attack may vary depending on the ty...

PHP Lite Calendar Express 2.2 - Subscribe.php?cid SQL Injection

PHP Lite Calendar Express 2.2 - Subscribe.php?cid SQL Injection source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

PHP Lite Calendar Express 2.2 - login.php?cid SQL Injection

PHP Lite Calendar Express 2.2 - login.php?cid SQL Injection source: https://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful...

Calendar Express 2.2 - search.php Cross-Site Scripting

Calendar Express 2.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14505/info Calendar Express is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

E107 Website System 0.6 - Attached File Cross-Site Scripting

source: https://www.securityfocus.com/bid/14495/info e107 Website System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

PHP-Fusion 4.05.06.0 - messages.php SQL Injection

PHP-Fusion 4.05.06.0 - messages.php SQL Injection source: https://www.securityfocus.com/bid/14489/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'messages.php' script before using it in ...