Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/47784/info Apache Struts is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Successful exploitation requires 'Dynamic Method Invocation' to be enabled by default. An attacker may leverage this...

encoder 0.4.10 - edit.php Cross-Site Scripting

encoder 0.4.10 - edit.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47755/info encoder is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Gelsheet 1.02 - index.php Cross-Site Scripting

Gelsheet 1.02 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47758/info Gelsheet is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Ampache 3.5.4 - login.php Cross-Site Scripting

Ampache 3.5.4 - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47756/info Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Ampache 3.5.4 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47756/info Ampache is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

encoder 0.4.10 - 'edit.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47755/info encoder is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Gelsheet 1.02 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47758/info Gelsheet is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

e107 0.7.25 - news.php SQL Injection

e107 0.7.25 - news.php SQL Injection source: https://www.securityfocus.com/bid/47750/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

BMC Remedy Knowledge Management 7.5.00 - Default Account Multiple Cross-Site Scripting Vulnerabilities

BMC Remedy Knowledge Management 7.5.00 - Default Account Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47728/info BMC Remedy Knowledge Management is prone to a default-account vulnerability and multiple cross-site scripting vulnerabilities because it fail...

PHP Directory Listing Script 3.1 - index.php Cross-Site Scripting

PHP Directory Listing Script 3.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47727/info PHP Directory Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execut...

PHP Directory Listing Script 3.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47727/info PHP Directory Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Web Auction 0.3.6 - lang Cross-Site Scripting

Web Auction 0.3.6 - lang Cross-Site Scripting source: https://www.securityfocus.com/bid/47682/info Web Auction is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Proofpoint Protection Server 5.5.5 - process.cgi Cross-Site Scripting

Proofpoint Protection Server 5.5.5 - process.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/47687/info Proofpoint Protection Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issu...

SelectaPix 1.4.1 - uploadername Cross-Site Scripting

SelectaPix 1.4.1 - uploadername Cross-Site Scripting source: https://www.securityfocus.com/bid/47701/info SelectaPix is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code ...

Proofpoint Protection Server 5.5.5 - 'process.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47687/info Proofpoint Protection Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

SelectaPix 1.4.1 - 'uploadername' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47701/info SelectaPix is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

LDAP Account Manager 3.4.0 - selfserviceSaveOk Cross-Site Scripting

LDAP Account Manager 3.4.0 - selfserviceSaveOk Cross-Site Scripting source: https://www.securityfocus.com/bid/47674/info LDAP Account Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...

Kusaba X Multiple Cross Site Scripting Vulnerabilities

Kusaba X is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

OpenMyZip 0.1 - .zip Remote Buffer Overflow

OpenMyZip 0.1 - .zip Remote Buffer Overflow source: https://www.securityfocus.com/bid/47678/info OpenMyZip is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the...

OpenMyZip 0.1 - '.zip' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47678/info OpenMyZip is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will...