PHD Help Desk 1.43 - atributo_list.php Multiple Cross-Site Scripting Vulnerabilities

PHD Help Desk 1.43 - atributolist.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data...

Novell eDirectory 8.8 - '/dhost/modules?I:' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37009/info Novell eDirectory is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the affected application...

Apache mod_perl - Apache::Status Apache2::Status Cross-Site Scripting

Apache modperl - Apache::Status Apache2::Status Cross-Site Scripting source: https://www.securityfocus.com/bid/34383/info The Apache 'modperl' module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

Oracle Database Server SQL Injection In Package SYS.KUPV (CVE-2006-0586)

Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...

nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability

The 'nginx' program is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result i...

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Jetty 6.1.x - JSP Snoop Page Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37927/info Jetty is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - 'index.php?last_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

OpenDocMan 1.2.5 - toBePublished.php Multiple Cross-Site Scripting Vulnerabilities

OpenDocMan 1.2.5 - toBePublished.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

Snitz Forums 2000 3.4.7 - pop_send_to_friend.asp?url Cross-Site Scripting

Snitz Forums 2000 3.4.7 - popsendtofriend.asp?url Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

Snitz Forums 2000 3.4.7 - 'pop_send_to_friend.asp?url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the...

Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting

Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

AdaptBB 1.0 - q Cross-Site Scripting

AdaptBB 1.0 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

AdaptBB 1.0 - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42930/info AdaptBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Achievo 1.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/36661/info Achievo is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

Microsoft Visio Version Number Handling Code Execution (MS07-030; CVE-2007-0934)

Microsoft Visio is a diagramming application that is part of the Microsoft Office suite. Microsoft Office is a popular productivity application suite released by Microsoft Corporation. It includes a word processor, a spreadsheet application, a presentation editor, and a number of other applicatio...

Mozilla Bugzilla 'Bug.search()' WebService Function SQL Injection Vulnerability

Bugzilla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

nginx HTTP Request Remote Buffer Overflow Vulnerability

The 'nginx' program is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result i...

Vastal I-Tech Agent Zone - view_listing.php SQL Injection

Vastal I-Tech Agent Zone - viewlisting.php SQL Injection source: https://www.securityfocus.com/bid/36503/info Agent Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...