Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31335/info Datalife Engine CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

InterTech WCMS - 'etemplate.php' SQL Injection

source: https://www.securityfocus.com/bid/31350/info InterTech Web Content Management System WCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

MapCal 0.1 - id SQL Injection

MapCal 0.1 - id SQL Injection source: https://www.securityfocus.com/bid/31304/info MapCal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

6rbScript - cat.php SQL Injection

6rbScript - cat.php SQL Injection source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

6rbScript - 'cat.php' SQL Injection

source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

MapCal 0.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/31304/info MapCal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

eXtrovert software Thyme 1.3 - add_calendars.php Cross-Site Scripting

eXtrovert software Thyme 1.3 - addcalendars.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31287/info Thyme is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

BlueCUBE CMS - tienda.php SQL Injection

BlueCUBE CMS - tienda.php SQL Injection source: https://www.securityfocus.com/bid/31323/info BlueCUBE CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Achievo 1.3.2 - atknodetype Cross-Site Scripting

Achievo 1.3.2 - atknodetype Cross-Site Scripting source: https://www.securityfocus.com/bid/31326/info Achievo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Parallels H-Sphere 3.03.1 - login.php Multiple Cross-Site Scripting Vulnerabilities

Parallels H-Sphere 3.03.1 - login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31256/info H-Sphere is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

Quick Cart 3.1 - admin.php Cross-Site Scripting

Quick Cart 3.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

Cars Vehicle - page.php SQL Injection

Cars Vehicle - page.php SQL Injection source: https://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities

Dynamic MP3 Lister 2.0.1 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31151/info Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

QuicO - photo.php SQL Injection

QuicO - photo.php SQL Injection source: https://www.securityfocus.com/bid/31154/info QuicO is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities

Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/31152/info Paranews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Dynamic MP3 Lister 2.0.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31151/info Dynamic MP3 Lister is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Nooms 1.1 - search.php?q Cross-Site Scripting

Nooms 1.1 - search.php?q Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code i...

Nooms 1.1 - smileys.php?page_id Cross-Site Scripting

Nooms 1.1 - smileys.php?pageid Cross-Site Scripting source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Nooms 1.1 - 'search.php?q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31110/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...