NConf delete_attr.php id Parameter SQL Injection

The version of the NConf installed on the remote host is affected by a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the 'id' parameter of the 'deleteattr.php' script. An attacker may be able to leverage this to manipulate data in the back-end database o...

OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities

OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/58720/info OrionDB Web Directory is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to...

Multiple Vulnerabilities in KrisonAV CMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in KrisonAV CMS, which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-Site Scripting XSS vulnerability in KrisonAV CMS: CVE-2013-2712 The vulnerability exists due to...

OrionDB Web Directory - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58720/info OrionDB Web Directory is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability

This host is installed with Wordpress WP Banners Lite Plugin and is prone to xss vulnerability. OpenVAS Vulnerability Test $Id: gbwordpresswpbannerslitexssvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability Authors: Thanga Prakash S...

WordPress WP Banners Lite Plugin Cross Site Scripting Vulnerability

WordPress WP Banners Lite Plugin is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Domino 8.5.x - 'x.nsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/58715/info IBM Lotus Domino is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

OpenCart 1.5.5.1 - FileManager.php Directory Traversal Arbitrary File Access

OpenCart 1.5.5.1 - FileManager.php Directory Traversal Arbitrary File Access waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 19. March 2013 Location:...

OpenCart 1.5.5.1 - 'FileManager.php' Directory Traversal Arbitrary File Access

waraxe-2013-SA098 - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 19. March 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-98.html Description of vulnerabl...

OpenCart 1.5.5.1 Directory Traversal Vulnerability

OpenCart version 1.5.5.1 suffers from a directory traversal vulnerability. Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 ===================================================== Author: Janek Vind "waraxe" Date: 19. March 2013 Location: Estonia, Tartu Web:...

FreeBSD : piwigo -- CSRF/Path Traversal (edd201a5-8fc3-11e2-b131-000c299b62e1)

High-Tech Bridge Security Research Lab reports : The CSRF vulnerability exists due to insufficient verification of the HTTP request origin in '/admin.php' script. A remote attacker can trick a logged-in administrator to visit a specially crafted webpage and create arbitrary PHP file on the remote...

BlazeVideo HDTV Player Standard - .plf File Remote Buffer Overflow

BlazeVideo HDTV Player Standard - .plf File Remote Buffer Overflow source: https://www.securityfocus.com/bid/58624/info BlazeVideo HDTV Player Standard is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may...

BlazeVideo HDTV Player Standard - '.plf' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/58624/info BlazeVideo HDTV Player Standard is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

RubyGems fastreader - 'entry_controller.rb' Remote Command Execution

source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary commands in the context of the affected...

RubyGems fastreader - entry_controller.rb Remote Command Execution

RubyGems fastreader - entrycontroller.rb Remote Command Execution source: https://www.securityfocus.com/bid/58450/info fastreader is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

PHPBoost - Arbitrary File Upload Information Disclosure

PHPBoost - Arbitrary File Upload Information Disclosure source: https://www.securityfocus.com/bid/58432/info PHPBoost is prone to an information disclosure vulnerability and an arbitrary file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacke...

WordPress Plugin podPress - playerID Cross-Site Scripting

WordPress Plugin podPress - playerID Cross-Site Scripting source: https://www.securityfocus.com/bid/58421/info The podPress plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to...

Asteriskguru Queue Statistics - 'warning' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58418/info Asteriskguru Queue Statistics is prone to an cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Your Own Classifieds - Cross-Site Scripting

Your Own Classifieds - Cross-Site Scripting source: https://www.securityfocus.com/bid/58399/info Your Own Classifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Your Own Classifieds - Cross-Site Scripting

source: https://www.securityfocus.com/bid/58399/info Your Own Classifieds is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...