PHPMyAdmin 2.x Convcharset Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12982/info phpMyAdmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'convcharset' parameter. phpMyAdmin versions prior to 2.6.2-rc1 are affected by this...

The Search Engine Project 0.942 Configfunction.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application...

DCForum 1-6 DCBoard Script Page Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15885/info DCForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

Black Knight Forum 4.0 Member.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful...

Uapplication Ublog Reload 1.0.5 Trackback.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13994/info Ublog Reload is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Caucho Resin 3.1 Encoded Space (%20) Request Path Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access potentially sensitive data that...

Symantec Multiple Products Client Proxy ActiveX (CLIproxy.dll) Remote Overflow

No description provided by source. source: http://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote...

PHPBB 2.0.x URL Tag BBCode.PHP Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13545/info The phpbb vendor reports that a critical vulnerability exists in the BBCode handling routines of the 'bbcode.php' script. The bbcode url tag is not properly sanitized of user-supplied input. This could permit t...

PHP Upload Tool 1.0 - Arbitrary File Upload and Directory Traversal Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-supplied data. An attacker could...

Pidgin <= 2.4.2 'msn_slplink_process_msg()' Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33414/info Pidgin is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will cause the affected application to crash, effectively denying service to...

Land Down Under 800/801 auth.php m Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14820/info Land Down Under is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

WebIf OutConfig Parameter Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24516/info WebIf is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

PHP Invoice 2.2 Home.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...

ezContents 'minicalendar.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30373/info ezContents CMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of th...

D-Forum 1.11 Nav.PHP3 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12720/info D-Forum is reportedly affected by a cross-site scripting vulnerability. This issue is due to the application failing to properly sanitize user-supplied input. As a result of this vulnerability, it is possible f...

Learn.com Learncenter.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19781/info Learn.com learncenter is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

VPOPMail 0.9x vpopmail.php Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of user-supplied input. As...

PHP Live Helper 2.0 Chat.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17960/info PHP Live Helper is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrar...

SAP Internet Graphics Server <= 7.0 PARAMS Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may perform cross-site scripting attacks on...

Joomla! and Mambo Joomlearn LMS Component - 'cat' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...