SquidClamav clwarn.cgi url Parameter XSS

The version of SquidClamav installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to the 'url' parameter of the 'clwarn.cgi' script. An attacker may leverage this issue to execute arbitrary script in the browser o...

Cloudsafe365 Plugin for WordPress 'file' Parameter Traversal Arbitrary File Access

The Cloudsafe365 Plugin for WordPress installed on the remote host is affected by a directory traversal vulnerability due to a failure to properly sanitize user-supplied input to the 'file' parameter of the admin/editor/cs365edit.php script. This vulnerability allows an unauthenticated, remote...

WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities

WordPress Theme Purity - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55605/info Purity theme for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage thes...

DSA-2540-1 mahara - cross-site scripting

Bulletin has no description...

Cm3 CMS - 'search.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55395/info Cm3 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Kayako Fusion - 'download.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55417/info Kayako Fusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

PHPFox 3.0.1 - ajax.php Multiple Cross-Site Scripting Vulnerabilities

PHPFox 3.0.1 - ajax.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55405/info phpFox is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Sciretech (Multiple Products) - Multiple SQL Injections

Sciretech Multiple Products - Multiple SQL Injections source: https://www.securityfocus.com/bid/55390/info Sciretech Multimedia Manager and Sciretech File Manager are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in a...

DataWatch Monarch BI v5.1 admin section reflected cross-site scripting

Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a reflected cross-site scripting vulnerability because it fails to sufficientl...

Sitemax Maestro - SQL Injection / Local File Inclusion

source: https://www.securityfocus.com/bid/55386/info Sitemax Maestro is prone to SQL-injection and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data,...

TomatoCart - example_form.ajax.php Cross-Site Scripting

TomatoCart - exampleform.ajax.php Cross-Site Scripting source: https://www.securityfocus.com/bid/55295/info TomatoCart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code i...

WordPress Plugin Download Monitor - dlsearch Cross-Site Scripting

WordPress Plugin Download Monitor - dlsearch Cross-Site Scripting source: https://www.securityfocus.com/bid/55487/info The Download Monitor plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage thi...

TomatoCart - 'example_form.ajax.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55295/info TomatoCart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

WordPress Plugin Download Monitor - 'dlsearch' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55487/info The Download Monitor plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Crowbar - file Multiple Cross-Site Scripting Vulnerabilities

Crowbar - file Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55315/info Crowbar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

Crowbar - 'file' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55315/info Crowbar is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PrestaShop 1.4.7 - Multiple Cross-Site Scripting Vulnerabilities

PrestaShop 1.4.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55280/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

JW Player - logo.link Cross-Site Scripting

JW Player - logo.link Cross-Site Scripting source: https://www.securityfocus.com/bid/55199/info JW Player is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser...

Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities

Phorum 5.2.18 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55275/info Phorum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

PrestaShop 1.4.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55280/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...