Cisco IOS 12.x - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33260/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Cisco IOS 12.x - HTTP Server Multiple Cross-Site Scripting Vulnerabilities

Cisco IOS 12.x - HTTP Server Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33260/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

Dark Age CMS 2.0 - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

tadbook2 Module for XOOPS - open_book.php SQL Injection

tadbook2 Module for XOOPS - openbook.php SQL Injection source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

SolucionXpressPro - main.php SQL Injection

SolucionXpressPro - main.php SQL Injection source: https://www.securityfocus.com/bid/33111/info SolucionXpressPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

SolucionXpressPro - 'main.php' SQL Injection

source: https://www.securityfocus.com/bid/33111/info SolucionXpressPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

DO-CMS 3.0 - p Multiple SQL Injections

DO-CMS 3.0 - p Multiple SQL Injections source: https://www.securityfocus.com/bid/32906/info DO-CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Easysitenetwork Jokes Complete Website - joke.php SQL Injection

Easysitenetwork Jokes Complete Website - joke.php SQL Injection source: https://www.securityfocus.com/bid/32908/info EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection

source: https://www.securityfocus.com/bid/32908/info EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WebPhotoPro - Multiple SQL Injections

source: https://www.securityfocus.com/bid/32829/info WebPhotoPro is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...

ASP-DEV XM Events Diary - cat SQL Injection

ASP-DEV XM Events Diary - cat SQL Injection source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

ASP-DEV XM Events Diary - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

WordPress Plugin Fuctweb CapCC 1.0 - 'plugins.php' SQL Injection

source: https://www.securityfocus.com/bid/39038/info Fuctweb CapCC Plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Professional Download Assistant 0.1 - SQL Injection

Professional Download Assistant 0.1 - SQL Injection source: https://www.securityfocus.com/bid/32706/info Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Microsoft Office Word Document Table Property Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. Exploitation requires that the attacker coerce the target into opening a malicious .DOC file. The specific flaw exists when processing a malformed table property within a...

Professional Download Assistant 0.1 - SQL Injection

source: https://www.securityfocus.com/bid/32706/info Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

PHPepperShop 1.4 - index.php Cross-Site Scripting

PHPepperShop 1.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

PHPepperShop 1.4 - shopkontakt.php Cross-Site Scripting

PHPepperShop 1.4 - shopkontakt.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

PHPepperShop 1.4 - shopAdminshop_kunden_mgmt.php Cross-Site Scripting

PHPepperShop 1.4 - shopAdminshopkundenmgmt.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

PHPepperShop 1.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...