1695 matches found
BBlog 0.7.4 - PostID SQL Injection
BBlog 0.7.4 - PostID SQL Injection source: https://www.securityfocus.com/bid/13398/info bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...
BBlog 0.7.4 - 'PostID' SQL Injection
source: https://www.securityfocus.com/bid/13398/info bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...
PHP-Nuke 7.2 Multiple Video Gallery Module - SQL Injection
source: https://www.securityfocus.com/bid/10215/info Reportedly the PHP-Nuke Video Gallery module is affected by multiple SQL injection vulnerabilities. This is due to a failure of the application to properly sanitize user-supplied input prior to using it in an SQL query. These issues may allow a...
OpenBB 1.0.x - 'member.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...
Phorum 3.4.x - Phorum_URIAuth SQL Injection
Phorum 3.4.x - PhorumURIAuth SQL Injection source: https://www.securityfocus.com/bid/10173/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue may allow a remote...
Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting
Rhino Software Zaep AntiSpam 2.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10139/info It has been reported that Zaep AntiSpam is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI input. Th...
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting
Expinion.net Member Management System 2.1 - error.asp?err Cross-Site Scripting source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure...
Expinion.net Member Management System 2.1 - 'register.asp?err' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9932/info It has been reported that a number of Member Management System scripts are prone to cross-site scripting vulnerabilities. These issues are reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate...
Phorum 3.x - register.php HTTP_REFERER Cross-Site Scripting
Phorum 3.x - register.php HTTPREFERER Cross-Site Scripting source: https://www.securityfocus.com/bid/9882/info It has been reported that Phorum is prone to a cross-site scripting vulnerability across multiple modules. The issue presents itself across multiple modules including 'login.php',...
cPanel <= 9.1.0 Multiple Vulnerabilities
The version of cPanel installed on the remote host is version 9.1.0 or earlier and thus reportedly affected by multiple issues: - The dohtaccess.html script fails to sanitize input supplied by a user and is affected by a cross-site scripting vulnerability. CVE-2004-2308 - Both the Login Page and...
IGeneric Free Shopping Cart 1.4 - SQL Injection
IGeneric Free Shopping Cart 1.4 - SQL Injection source: https://www.securityfocus.com/bid/9771/info It has been reported that iGeneric Free Shopping Cart is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters...
Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting
Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting source: https://www.securityfocus.com/bid/9777/info It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input...
IGeneric Free Shopping Cart 1.4 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters Exploitation could allow for theft of cookie-based...
WebCortex WebStores2000 - error.asp Cross-Site Scripting
WebCortex WebStores2000 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/9693/info It has been reported that WebStores2000 is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code...
WebCortex WebStores2000 - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9693/info It has been reported that WebStores2000 is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may facilitate cross-site scripting attacks...
vBulletin 1.01.12.0.x2.2.x - Cross-Site Scripting
vBulletin 1.01.12.0.x2.2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/9649/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability. This issue is reportedly due to a failure to sanitize user input and so allow HTML and script code that may...
Maxwebportal 1.3x - Personal Message 'SendTo' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9625/info It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection. MaxWebPortal versions...
Maxwebportal 1.3x - 'down.asp' HTTP_REFERER Cross-Site Scripting
source: https://www.securityfocus.com/bid/9625/info It has been reported that MaxWebPortal may be prone to multiple vulnerabilities due to insufficient sanitization of user-supplied input. The specific issues include cross-site scripting, HTML injection and SQL injection. MaxWebPortal versions...
PHP-Nuke 6.x7.x Reviews Module - Cross-Site Scripting
PHP-Nuke 6.x7.x Reviews Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/9613/info It has been reported that the PHP-Nuke module 'Reviews' is prone to a cross-site scripting vulnerability. The issue arises due to the module failing to properly sanitize user-supplied...
PHP-Nuke 6.x/7.x 'Reviews' Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/9613/info It has been reported that the PHP-Nuke module 'Reviews' is prone to a cross-site scripting vulnerability. The issue arises due to the module failing to properly sanitize user-supplied information. This could allow for execution of hostile HTML a...