Inventory - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/56293/info Inventory is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

Gramophone - rs Cross-Site Scripting

Gramophone - rs Cross-Site Scripting source: https://www.securityfocus.com/bid/56299/info Gramophone is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

FirePass 7.0 SSL VPN - refreshURL Open Redirection

FirePass 7.0 SSL VPN - refreshURL Open Redirection source: https://www.securityfocus.com/bid/56156/info FirePass SSL VPN is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

CMS Mini 0.2.2 - index.php Script Cross-Site Scripting

CMS Mini 0.2.2 - index.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/56148/info CMS Mini is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code ...

CMS Mini 0.2.2 - 'index.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/56148/info CMS Mini is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

WordPress Plugin Wordfence Security - Cross-Site Scripting

WordPress Plugin Wordfence Security - Cross-Site Scripting source: https://www.securityfocus.com/bid/56159/info The Wordfence Security plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this iss...

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...

Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

WordPress Plugin Wordfence Security - Cross-Site Scripting

source: https://www.securityfocus.com/bid/56159/info The Wordfence Security plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ModSecurity - POST Security Bypass

ModSecurity - POST Security Bypass source: https://www.securityfocus.com/bid/56096/info ModSecurity is prone to a security-bypass vulnerability because it fails to sufficiently sanitize user-supplied input. Successful exploits can allow attackers to bypass filtering rules; this may aid in further...

WordPress Plugin Slideshow - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56090/info The Slideshow plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WANem - Multiple Cross-Site Scripting Vulnerabilities

WANem - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56326/info WANem is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

SilverStripe CMS 2.4.x - 'BackURL' Open Redirection

source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible. SilverStripe 2.4.7 and prior are...

SilverStripe CMS 2.4.x - BackURL Open Redirection

SilverStripe CMS 2.4.x - BackURL Open Redirection source: https://www.securityfocus.com/bid/55915/info SilverStripe is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks a...

OpenX 2.8.10 - plugin-index.php Cross-Site Scripting

OpenX 2.8.10 - plugin-index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55860/info OpenX is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could...

PhpTax 0.8 'drawimage.php' Remote Arbitrary Command Execution Vulnerability

PhpTax is prone to a remote arbitrary command execution vulnerability because it fails to properly validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Interspire Email Marketer - Cross-Site Scripting / HTML Injection / SQL Injection

source: https://www.securityfocus.com/bid/55829/info Interspire Email Marketer is prone to the following input-validation vulnerabilities because it fails to properly sanitize user-supplied input: 1. An SQL injection vulnerabilities 2. Multiple HTML injection vulnerabilities 3. A cross-site...

Novell eDirectory Multiple Buffer Overflow Vulnerabilities (CVE-2006-5478) - Active Check

Novell eDirectory is prone to multiple multiple stack based buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

Open Realty - 'select_users_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

phpMyBitTorrent 2.04 - Multiple Vulnerabilities

phpMyBitTorrent 2.04 - Multiple Vulnerabilities waraxe-2012-SA091 - Multiple Vulnerabilities in phpMyBitTorrent 2.04 =============================================================================== Author: Janek Vind "waraxe" Date: 01. October 2012 Location: Estonia, Tartu Web:...