Barracuda SSL VPN - 'fileSystem.do' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Barracuda SSL VPN - launchAgent.do?return-To Cross-Site Scripting

Barracuda SSL VPN - launchAgent.do?return-To Cross-Site Scripting source: https://www.securityfocus.com/bid/54593/info Barracuda SSL VPN 680 is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

WordPress Paid Memberships Pro Plugin 'memberslist-csv.php' Information Disclosure Vulnerability

The Paid Memberships Pro plugin for WordPress is prone to an information- disclosure vulnerability because it fails to sufficiently validate user- supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

web@all - name Cross-Site Scripting

web@all - name Cross-Site Scripting source: https://www.securityfocus.com/bid/54466/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

web@all - 'name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54466/info web@all is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

WordPress Plugin church_admin - id Cross-Site Scripting

WordPress Plugin churchadmin - id Cross-Site Scripting source: https://www.securityfocus.com/bid/54329/info The churchadmin plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

WordPress Plugin SocialFit - 'msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54320/info SocialFit plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting us...

sflog! - 'section' Local File Inclusion

source: https://www.securityfocus.com/bid/54334/info sflog! is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Thi...

WordPress Plugin church_admin - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54329/info The churchadmin plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

sflog! - section Local File Inclusion

sflog! - section Local File Inclusion source: https://www.securityfocus.com/bid/54334/info sflog! is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the...

WordPress Plugin Knews Multilingual Newsletters - Cross-Site Scripting

source: https://www.securityfocus.com/bid/54330/info Knews Multilingual Newsletters for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

PHP MBB - Cross-Site Scripting SQL Injection

PHP MBB - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/54271/info php MBB is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

SWFupload - 'movieName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54245/info SWFUpload is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Metropolis Technologies OfficeWatch Directory Traversal Vulnerability

Metropolis Technologies OfficeWatch is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. OpenVAS Vulnerability Test $Id:...

Schoolhos CMS - HTML Injection

Schoolhos CMS - HTML Injection source: https://www.securityfocus.com/bid/54204/info Schoolhos CMS is prone to an arbitrary file-upload vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker could exploit these issues to...

DigPHP - dig.php Script Remote File Disclosure

DigPHP - dig.php Script Remote File Disclosure source: https://www.securityfocus.com/bid/54207/info DigPHP is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of...

Umapresence - Local File Inclusion Arbitrary File Deletion

Umapresence - Local File Inclusion Arbitrary File Deletion source: https://www.securityfocus.com/bid/54194/info Umapresence is prone to a local file-include vulnerability and an arbitrary file-deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. An...

FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Amazon S3 Uploadify Script - 'Uploadify.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54170/info Amazon S3 Uploadify Script is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

CMS Lokomedia - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/54150/info CMS Lokomedia is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of...