JPortal Web Portal 2.2.1/2.3.1 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/15324/info JPortal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being used in an SQL query. Successful exploitation could result in a compromise of the application,...

PHP Handicapper - Process_signup.php HTTP Response Splitting

PHP Handicapper - Processsignup.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15301/info PHP Handicapper is vulnerable to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker...

ICECast crafted URL DoS

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. An remote attacker could send specially crafted URL...

ICECast XSS

The remote server runs a version of ICECast which is as old as or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a resul...

CjOverkill trade.php XSS

The remote server runs a version of CjOverkill, a free traffic trading script which is as old as or older than version 4.0.3. The remote version of this software is affected by a cross-site scripting vulnerability in the script 'trade.php'. This issue is due to a failure of the application to...

MVNForum Search Cross-Site Scripting Vulnerability

The version of mvnForum installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are...

Simple PHP Blog 0.4 - colors.php Multiple Cross-Site Scripting Vulnerabilities

Simple PHP Blog 0.4 - colors.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...

Simple PHP Blog 0.4 - preview_static_cgi.php Multiple Cross-Site Scripting Vulnerabilities

Simple PHP Blog 0.4 - previewstaticcgi.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize...

PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser...

Simple PHP Blog 0.4 - 'colors.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15283/info Simple PHP Blog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

phpMyAdmin 2.7 - sql.php Cross-Site Scripting

phpMyAdmin 2.7 - sql.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17487/info PHPMyAdmin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

PHPCafe Tutorial Manager - index.php SQL Injection

PHPCafe Tutorial Manager - index.php SQL Injection source: https://www.securityfocus.com/bid/15244/info PHPcafe Tutorial Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Invision Gallery 2.0.3 - index.php SQL Injection

Invision Gallery 2.0.3 - index.php SQL Injection source: https://www.securityfocus.com/bid/15240/info Invision Gallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Invision Gallery 2.0.3 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15240/info Invision Gallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Snitz Forum 2000 - post.asp Cross-Site Scripting

Snitz Forum 2000 - post.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...

PHP 4.x - PHPInfo Cross-Site Scripting

PHP 4.x - PHPInfo Cross-Site Scripting source: https://www.securityfocus.com/bid/15248/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

phpFaber CMS 1.3.36 - Htmlarea.php Cross-Site Scripting

phpFaber CMS 1.3.36 - Htmlarea.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20821/info phpFaber CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

phpFaber CMS 1.3.36 - 'Htmlarea.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20821/info phpFaber CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting us...

ASP Fast Forum - error.asp Cross-Site Scripting

ASP Fast Forum - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...