2052 matches found
phpCOIN 1.2 mod.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/12686/info Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality. An attacker may levera...
TRUC 0.11 'login_reset_password_page.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38445/info TRUC is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Dokeos 1.x forum/viewthread.php forum Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser ...
Shop-Script ProductID SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13635/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
SmallFTPD 1.0.3 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9684/info It has been reported that SmallFTPD is prone to a remote denial of service vulnerability. This issue is due to the application failing to properly validate user input. Successful exploitation of this issue may...
NoseRub <= 0.5.2 Login SQL Injection Vulnerability
No description provided by source. -- ---------- ---- - ---------------------------- ---------- ---- -- ----------------------------- ------------- ---seclog- ------------------ ------------ -- --- ------------------- --------- ---- ------------------- ------- -------------------------- ---...
Mantis 0.x/1.0 manage_user_page.php sort Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...
Chipmunk Guestbook 1.4 Homepage HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16112/info Chipmunk Guestbook is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...
CA eSCC r8/1.0,eTrust Audit r8/1.5 Web Server Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These...
Caldera UnixWare 7.1.1 WebTop SCOAdminReg.CGI Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3936/info UnixWare is a commercial Unix implementation distributed originally developed by SCO. It is now maintained and distributed by Caldera. The scoadminreg.cgi program does not properly validate user input when...
Dispair 0.1/0.2 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5392/info Dispair fails to sufficiently validate user-supplied input before it is passed to the shell via the Perl open function. Remote attackers may potentially exploit this issue to execute arbitrary commands on the...
NitroSecurity ESM 8.4.0a - Remote Code Execution
No description provided by source. -- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it was found that...
ACLogic CesarFTP 0.99 Remote Resource Exhaustion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9666/info It has been reported that CesarFTP is prone to a remote resource exhaustion vulnerability. This issue is due to the application failing to properly validate user input. Successful exploitation of this issue may...
WordPress Theme Infocus - '/infocus/lib/scripts/dl-skin.php' Local File Disclosure
source: https://www.securityfocus.com/bid/67934/info The Infocus theme for WordPress is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information fro...
Opera < 22 Multiple Chromium Vulnerabilities
The version of Opera installed on the remote host is prior to version 22. It is, therefore, reportedly affected by multiple vulnerabilities in the bundled version of Chromium : - Use-after-free errors exist related to 'styles' and 'SVG' handling. CVE-2014-1743, CVE-2014-1745 - An integer overflow...
vBulletin Nodeid Parameter SQL Injection (CVE-2013-3522)
An SQL injection vulnerability has been reported in vBulletin 5. The vulnerability is due to an insufficient validation on user input. A remote authenticated attacker could exploit this vulnerability by injecting a specially crafted SQL query via the nodeid parameter...
IBM WebSphere Portal 'FilterForm.jsp' XSS (PI15690)
The version of IBM WebSphere Portal on the remote host is affected by a cross-site scripting vulnerability in the 'FilterForm.jsp' script due to improper user input validation. An attacker can exploit this issue to execute code in the security context of a user's browser to steal authentication...
Google Chrome < 35.0.1916.114 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is a version prior to 35.0.1916.114. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to 'styles' and 'SVG' handling. CVE-2014-1743, CVE-2014-1745 - An integer overflow error exis...
Google Chrome < 35.0.1916.114 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is a version prior to 35.0.1916.114. It is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to 'styles' and 'SVG' handling. CVE-2014-1743, CVE-2014-1745 - An integer overflow error exists relate...
ownCloud Multiple Cross Site Scripting Vulnerabilities -01 (May 2014)
ownCloud is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...