Raised Eyebrow CMS - 'venue.php' SQL Injection

source: https://www.securityfocus.com/bid/44880/info Raised Eyebrow CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

PHPShop 2.1 EE - name_new Cross-Site Scripting

PHPShop 2.1 EE - namenew Cross-Site Scripting source: https://www.securityfocus.com/bid/44763/info PHPShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code i...

PHPShop 2.1 EE - 'name_new' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44763/info PHPShop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary HTML and script code in the browser of an unsuspecting user in the...

IBM OmniFind - 'command' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44940/info IBM OmniFind is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

WordPress Plugin jRSS Widget 1.1.1 - 'url' Information Disclosure

source: https://www.securityfocus.com/bid/44716/info The jRSS Widget Plugin for WordPress is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to view local files in the context of the affected...

Joomla! Component AutoArticles 3000 - SQL Injection

Joomla! Component AutoArticles 3000 - SQL Injection source: https://www.securityfocus.com/bid/44694/info The AutoArticles 3000 component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Online Work Order Suite - Login SQL Injection

Online Work Order Suite - Login SQL Injection source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Online Work Order Suite - Login SQL Injection

source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

bloofoxCMS 'gender' Parameter SQL Injection Vulnerability

bloofoxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue can allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Mozilla Firefox SeaMonkey 3.6.10 / Thunderbird 3.1.4 - 'document.write' Memory Corruption

source: https://www.securityfocus.com/bid/44247/info Mozilla Firefox, Thunderbird, and Seamonkey are prone to a memory-corruption vulnerability because they fail to adequately validate user-supplied data. Successful exploits may allow an attacker to execute arbitrary code in the context of the us...

TWiki Multiple Cross Site Scripting Vulnerabilities

TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TWiki 5.0 - binview?rev Cross-Site Scripting

TWiki 5.0 - binview?rev Cross-Site Scripting source: https://www.securityfocus.com/bid/44103/info TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in...

TWiki 5.0 - '/bin/view?rev' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44103/info TWiki is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Joomla! Component Club Manager - cm_id SQL Injection

Joomla! Component Club Manager - cmid SQL Injection source: https://www.securityfocus.com/bid/43821/info The Club Manager component for Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Horde IMP Webmail 'fetchmailprefs.php' HTML Injection Vulnerability

Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

NetArt Media Car Portal 2.0 - car SQL Injection

NetArt Media Car Portal 2.0 - car SQL Injection source: https://www.securityfocus.com/bid/43536/info Car Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection

Horde IMP Webmail 4.3.7 - fetchmailprefs.php HTML Injection source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML ...

MySITE - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/43510/info MySITE is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authenticati...

NetArt Media Car Portal 2.0 - 'car' SQL Injection

source: https://www.securityfocus.com/bid/43536/info Car Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Horde IMP Webmail 4.3.7 - 'fetchmailprefs.php' HTML Injection

source: https://www.securityfocus.com/bid/43515/info Horde IMP Webmail is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could run in the context of the affected...