Kryn.cms 0.9 - '_kurl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47973/info Kryn.cms is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Ajax Chat 1.0 - ajax-chat.php Cross-Site Scripting

Ajax Chat 1.0 - ajax-chat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47953/info Ajax Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Ajax Chat 1.0 - 'ajax-chat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47953/info Ajax Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Joomla! Component Map Locator - cid SQL Injection

Joomla! Component Map Locator - cid SQL Injection source: https://www.securityfocus.com/bid/47941/info The 'commaplocator' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Joomla! Component Map Locator - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/47941/info The 'commaplocator' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

LimeSurvey 1.85+ - admin.php Cross-Site Scripting

LimeSurvey 1.85+ - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47931/info LimeSurvey is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

Room Juice 0.3.3 - 'display.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47914/info Room Juice is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

LimeSurvey 1.85+ - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47931/info LimeSurvey is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

TWiki 5.0.1 - origurl Cross-Site Scripting

TWiki 5.0.1 - origurl Cross-Site Scripting source: https://www.securityfocus.com/bid/47899/info TWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser ...

Cisco Unified Operations Manager 8.5 - Common Services Device Center Cross-Site Scripting

Cisco Unified Operations Manager 8.5 - Common Services Device Center Cross-Site Scripting source: https://www.securityfocus.com/bid/47903/info Cisco Unified Operations Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacke...

TWiki 5.0.1 - 'origurl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47899/info TWiki is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

eFront 3.6.9 - submitScore.php Cross-Site Scripting

eFront 3.6.9 - submitScore.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

Mambo Component Docman 1.3.0 - Multiple SQL Injections

Mambo Component Docman 1.3.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/47857/info The 'comdocman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...

allocPSA 1.7.4 - loginlogin.php Cross-Site Scripting

allocPSA 1.7.4 - loginlogin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47860/info allocPSA is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

openQRM 4.8 - source_tab Cross-Site Scripting

openQRM 4.8 - sourcetab Cross-Site Scripting source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

eFront 3.6.9 - 'submitScore.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

openQRM 4.8 - 'source_tab' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Mambo Component Docman 1.3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/47857/info The 'comdocman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

AVS Ringtone Maker 1.6.1 - '.au' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47851/info AVS Ringtone Maker is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application...

DocMGR 1.1.2 - history.php Cross-Site Scripting

DocMGR 1.1.2 - history.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47861/info DocMGR is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...