5568 matches found
BrowserCRM 5.100.1 - URI Cross-Site Scripting
BrowserCRM 5.100.1 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...
BrowserCRM 5.100.1 - clients.php Cross-Site Scripting
BrowserCRM 5.100.1 - clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting thes...
HP OpenView Network Node Manager Multiple RCE Vulnerabilities
HP OpenView Network Node Manager NNM is prone to multiple remote code-execution vulnerabilities because it fails to sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
BrowserCRM 5.100.1 - contact_id SQL Injection
BrowserCRM 5.100.1 - contactid SQL Injection source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...
BrowserCRM 5.100.1 - 'contact_id' SQL Injection
source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...
BrowserCRM 5.100.1 - 'login[]' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...
BrowserCRM 5.100.1 - URI Cross-Site Scripting
source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...
vsftpd < 2.3.5 Buffer Overflow Vulnerability
vsftpd is prone to a heap based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting
WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...
Pet Listing - preview.php Cross-Site Scripting
Pet Listing - preview.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50996/info Pet Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...
Pet Listing - 'preview.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50996/info Pet Listing is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Axis M10 Series Network Cameras - Cross-Site Scripting
Axis M10 Series Network Cameras - Cross-Site Scripting source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execu...
Axis M10 Series Network Cameras - Cross-Site Scripting
source: https://www.securityfocus.com/bid/50968/info Axis M10 Series Network Cameras are prone to a cross-site scripting vulnerability because they fail to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Hero 3.69 - month Cross-Site Scripting
Hero 3.69 - month Cross-Site Scripting source: https://www.securityfocus.com/bid/50878/info Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Hero 3.69 - 'month' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50878/info Hero is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...
WordPress Plugin flash-album-gallery - facebook.php Cross-Site Scripting
WordPress Plugin flash-album-gallery - facebook.php Cross-Site Scripting source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...
WordPress Plugin flash-album-gallery - 'facebook.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50861/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
SugarCRM Community Edition 6.3.0RC1 - index.php Multiple SQL Injections
SugarCRM Community Edition 6.3.0RC1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/50870/info SugarCRM Community Edition is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Prestashop 1.4.4.1 - displayImage.php HTTP Response Splitting
Prestashop 1.4.4.1 - displayImage.php HTTP Response Splitting source: https://www.securityfocus.com/bid/50785/info Prestashop is prone to an HTTP-response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or...