Cofax 2.0 - search.htm Cross-Site Scripting

source: https://www.securityfocus.com/bid/15940/info Cofax is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

Marwel 2.7 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Libertas Enterprise CMS 3.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15950/info Enterprise CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...

Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15951/info Liferay Portal Enterprise is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

FLIP 0.9.0.1029 - forum.php?frame Cross-Site Scripting

FLIP 0.9.0.1029 - forum.php?frame Cross-Site Scripting source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15939/info Caravel CMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Miraserver 1.0 RC4 - index.php?page SQL Injection

Miraserver 1.0 RC4 - index.php?page SQL Injection source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Box UK Amaxus CMS 3.0 - Cross-Site Scripting

Box UK Amaxus CMS 3.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15936/info Box UK Amaxus CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15935/info Allinta CMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

ODFaq 2.1 - 'faq.php' SQL Injection

source: https://www.securityfocus.com/bid/15958/info ODFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

ScareCrow 2.13 - profile.cgi?user Cross-Site Scripting

ScareCrow 2.13 - profile.cgi?user Cross-Site Scripting source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

WebGlimpse 2.x - Cross-Site Scripting

WebGlimpse 2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/15916/info WebGlimpse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

IHTML Merchant Mall - SQL Injection

source: https://www.securityfocus.com/bid/15910/info iHTML Merchant Mall is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

ScareCrow 2.13 - post.cgi?forum Cross-Site Scripting

ScareCrow 2.13 - post.cgi?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

ScareCrow 2.13 - forum.cgi?forum Cross-Site Scripting

ScareCrow 2.13 - forum.cgi?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

Binary Board System 0.2.5 - 'toc.pl?board' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15913/info binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

WebGlimpse 2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15916/info WebGlimpse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

ScareCrow 2.13 - 'profile.cgi?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...