Free Web Chat Initial Release - Connection Saturation Denial of Service

Free Web Chat Initial Release - Connection Saturation Denial of Service source: https://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported...

eNdonesia 8.3 - Search Form Cross-Site Scripting

source: https://www.securityfocus.com/bid/10856/info It is reported that eNdonesia is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated web content. As a...

Imatix Xitami 2.5 - Server-Side Includes Cross-Site Scripting

Imatix Xitami 2.5 - Server-Side Includes Cross-Site Scripting source: https://www.securityfocus.com/bid/10778/info It is reported that Imatix Xitami is affected by a cross-site scripting vulnerability in the server side includes test script. This issue is due to a failure of the application to...

RaXnet Cacti 0.6.x/0.8.x - 'Auth_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/10960/info RaXnet Cacti is reportedly affected by a remote SQL injection vulnerability. This issue occurs in the authlogin.php script due to a failure of the application to properly sanitize user-supplied "username" URI parameter input before using it in ...

BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10734/info BoardPower Forum is reportedly affected by a cross-site scripting vulnerability in the icq.cgi script. This issue is due to a failure of the application to properly sanitize user-supplied URI input. A remote attacker can exploit this issue by...

YaPiG 0.92 - Remote Server-Side Script Execution

YaPiG 0.92 - Remote Server-Side Script Execution source: https://www.securityfocus.com/bid/10891/info A vulnerability is reported to exist in YaPiG that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue exists due to a lack if sanitization of user-supplie...

Jaws 0.2/0.3 - 'action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is prone to a cross-site scripting vulnerability. This...

CuteNews 0.881.3 - show_archives.php Cross-Site Scripting

CuteNews 0.881.3 - showarchives.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI inpu...

CuteNews 0.88/1.3 - 'example1.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10620/info It is reported that CuteNews is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. The problems present themselves when malicious HTML an...

phpHeaven phpMyChat 0.14.5 - 'admin.php3' Arbitrary File Access

source: https://www.securityfocus.com/bid/10556/info phpHeaven phpMyChat is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and design flaws. The following specific issues can affect the application: phpMyChat is prone to a HTML...

PHP-Nuke 6.x7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities

PHP-Nuke 6.x7.x Encyclopedia Module - Multiple Function Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues ca...

PHP-Nuke 6.x7.x FAQ Module - categories Cross-Site Scripting

PHP-Nuke 6.x7.x FAQ Module - categories Cross-Site Scripting source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nu...

PHP-Nuke 6.x/7.x FAQ Module - 'categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...

PHP-Nuke 6.x/7.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple cross-site scripting vulnerabilities...

Simple Machines Forum (SMF) 1.0 - Size Tag HTML Injection

Simple Machines Forum SMF 1.0 - Size Tag HTML Injection source: https://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser...

PHPX 3.x - Multiple Cross-Site Scripting Vulnerabilities

PHPX 3.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10283/info It has been reported that PHPX is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI...

Simple Machines Forum (SMF) 1.0 - Size Tag HTML Injection

source: https://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser. The issue exists due to insufficient sanitization of...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to...

SquirrelMail 1.4.x - Folder Name Cross-Site Scripting

source: https://www.securityfocus.com/bid/10246/info It has been reported that SquirrelMail is affected by a cross-site scripting vulnerability in the handling of folder name displays. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it...

OpenBB 1.0.x - board.php?FID SQL Injection

OpenBB 1.0.x - board.php?FID SQL Injection source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL...