AvailScript Job Portal Script - applynow.php SQL Injection

AvailScript Job Portal Script - applynow.php SQL Injection source: https://www.securityfocus.com/bid/31101/info AvailScript Job Portal Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting

Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31107/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverag...

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting

Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting source: https://www.securityfocus.com/bid/31110/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

Gallery 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31060/info Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

eXtrovert software Thyme 1.3 - 'pick_users.php' SQL Injection

source: https://www.securityfocus.com/bid/31063/info eXtrovert software Thyme is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

phpAdultSite CMS - results_per_page Cross-Site Scripting

phpAdultSite CMS - resultsperpage Cross-Site Scripting source: https://www.securityfocus.com/bid/31057/info phpAdultSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script...

E-PHP B2B Trading Marketplace Script - listings.php SQL Injection

E-PHP B2B Trading Marketplace Script - listings.php SQL Injection source: https://www.securityfocus.com/bid/31072/info E-Php B2B Trading Marketplace Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

phpAdultSite CMS - 'results_per_page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31057/info phpAdultSite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

XRms 1.99.2 - login.php?target Cross-Site Scripting

XRms 1.99.2 - login.php?target Cross-Site Scripting source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The...

XRms 1.99.2 - 'company_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to...

XRms 1.99.2 - 'opportunity_title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to...

XRms 1.99.2 - 'starting' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31008/info XRMS CRM is prone to multiple input-validation vulnerabilities, including an unspecified SQL-injection issue, an HTML-injection issue, and multiple cross-site scripting issues. The vulnerabilities occur because the application fails to...

CeleronDude Uploader 6.1 - 'account.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31010/info Celerondude Uploader is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service

Softalk Mail Server 8.5.1 - APPEND Remote Denial of Service source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit...

Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service

source: https://www.securityfocus.com/bid/30970/info Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to crash the affected application, denying servic...

IDevSpot BizDirectory 2.04 - page Cross-Site Scripting

IDevSpot BizDirectory 2.04 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection

source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

GenPortal - buscarCat.php Cross-Site Scripting

GenPortal - buscarCat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

GenPortal - 'buscarCat.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30957/info GenPortal is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...