W-Agora 4.2.1 - search.php?search_user Cross-Site Scripting

W-Agora 4.2.1 - search.php?searchuser Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitiz...

Particle Blogger 1.2.1 - Archives.php SQL Injection

Particle Blogger 1.2.1 - Archives.php SQL Injection source: https://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting

Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting source: https://www.securityfocus.com/bid/22966/info Microsoft Internet Explorer is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit...

MiniGZip - Controls File_Compress Buffer Overflow

MiniGZip - Controls FileCompress Buffer Overflow source: https://www.securityfocus.com/bid/22964/info The 'minigzip' tool is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. A local attacker can...

ClipShare 1.5.3 - 'ADODB-Connection.Inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22928/info ClipShare is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion

JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

Firebug 1.03 - Rep.JS Script Code Injection

source: https://www.securityfocus.com/bid/23349/info Firebug is prone to a script-code-injection vulnerability because it fails to adequately escape user-supplied data. An attacker can exploit this issue to execute arbitrary script code in the context of the application. Versions prior to 1.04 ar...

EPortfolio 1.0 - Client-Side Input Validation

source: https://www.securityfocus.com/bid/22829/info ePortfolio is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to perform various attacks that are caused by input-validation...

EPortfolio 1.0 - Client-Side Input Validation

EPortfolio 1.0 - Client-Side Input Validation source: https://www.securityfocus.com/bid/22829/info ePortfolio is prone to a client-side input-validation vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to perform various...

Shop Kit Plus - StyleCSS.php Local File Inclusion

Shop Kit Plus - StyleCSS.php Local File Inclusion source: https://www.securityfocus.com/bid/22697/info Shop Kit Plus is prone to a local file-include vulnerability because it fails to adequately sanitize user-supplied data. An attacker can exploit this vulnerability using directory-traversal...

Shop Kit Plus - 'StyleCSS.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22697/info Shop Kit Plus is prone to a local file-include vulnerability because it fails to adequately sanitize user-supplied data. An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of...

Turuncu Portal 1.0 - 'H_Goster.asp' SQL Injection

source: https://www.securityfocus.com/bid/22591/info Turuncu Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/addTagmin.php?configpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/updatefilter.php?Admin' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Tagit! Tagit2b 2.1.B Build 2 - tagmindelTagmin.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagmindelTagmin.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues m...

Tagit! Tagit2b 2.1.B Build 2 - tagmineditTag.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagmineditTag.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

Tagit! Tagit2b 2.1.B Build 2 - tagmindelTag.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagmindelTag.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

Tagit! Tagit2b 2.1.B Build 2 - tagminaddTagmin.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminaddTagmin.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues m...

Tagit! Tagit2b 2.1.B Build 2 - tagminmanageTagmins.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminmanageTagmins.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...