5584 matches found
XRMS 1.99.2 cases/some.php case_title Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because...
DropAFew 0.2 editlogcal.php save Action calories Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Easyedit CMS subcategory.php intSubCategoryID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
PhpMyAgenda 2.1 - 'infoevent.php3' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29164/info PhpMyAgenda is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
minihttp file-sharing for net 1.5 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8619/info It has been reported that WebForums and File-Sharing for NET are prone to a remote directory traversal attack due to insufficient sanitization of user-supplied data. This vulnerability could allow a remote...
Hunkaray Okul Portali 1.1 Duyuruoku.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25185/info Hunkaray Okul Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Ocean12 FAQ Manager Pro 'Keyword' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
Foxit WAC Server 2.0 Build 3503 Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27142/info Foxit WAC Server is prone to a denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to crash the affected...
NTSOFT BBS E-Market Professional Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35893/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrar...
PHPizabi 0.8 'notepad_body' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34223/info PHPizabi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
ParsBlogger 'blog.asp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32529/info ParsBlogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of ...
LANAI CMS 1.2.14 GALLERY Module gid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
XRMS 1.99.2 contacts/some.php last_name Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because...
Nokia Electronic Documentation 5.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitization performed on user...
Typo3 3.7/3.8/4.0 Class.TX_RTEHTMLArea_PI1.PHP Multiple Remote Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues...
Comparison Engine Power 1.0 'product.comparision.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
ViArt CMS forums.php category_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...
Maelstrom Player 3.0.x Argument Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7632/info Maelstrom for Linux has been reported prone to a buffer overflow vulnerability. The issue is reportedly due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into an...
Joomla! and Mambo 'com_most' Component - 'secid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27922/info The Joomla! and Mambo 'commost' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...
PHP-Nuke 'KuiraniKerim' Module - 'sid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29261/info The 'KuiraniKerim' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...