Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43163/info Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

DvBBS 2.0 - boardrule.php SQL Injection

DvBBS 2.0 - boardrule.php SQL Injection source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thi...

Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

MKPortal 1.x - Multiple BBCode HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/36218/info MKPortal is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacke...

MKPortal 1.x (Multiple Modules) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/36216/info Multiple modules of MKPortal are prone to cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

Tukanas Classifieds 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/43337/info Tukanas Classifieds is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Smart ASP Survey - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/43370/info Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the...

Free Arcade Script 1.0 - search Cross-Site Scripting

Free Arcade Script 1.0 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...

PHP 4.x, 5.2.6 DoS Vulnerability

PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Free Arcade Script 1.0 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

VideoGirls - forum.php?t Cross-Site Scripting

VideoGirls - forum.php?t Cross-Site Scripting source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...

VideoGirls - view.php?p Cross-Site Scripting

VideoGirls - view.php?p Cross-Site Scripting source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in...

VideoGirls - 'profile.php?profile_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

VideoGirls - 'forum.php?t' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

VideoGirls - 'view.php?p' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36168/info VideoGirls is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

OpenAutoClassifieds 1.5.9 - SQL Injection

source: https://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

HotScripts Type PHP Clone Script - feedback.php?msg Cross-Site Scripting

HotScripts Type PHP Clone Script - feedback.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/43519/info Hotscripts Type PHP Clone Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

HotScripts Type PHP Clone Script - lostpassword.php?msg Cross-Site Scripting

HotScripts Type PHP Clone Script - lostpassword.php?msg Cross-Site Scripting source: https://www.securityfocus.com/bid/43519/info Hotscripts Type PHP Clone Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker ma...