Chyrp 2.1.2 - '/includes/error.php?body' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52117/info Chyrp is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal...

webgrind 'dataFile' Parameter Cross Site Scripting Vulnerability

webgrind is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to stea...

ContentLion Alpha 1.3 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52112/info ContentLion Alpha is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/52113/info Dolibarr is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks...

Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities

Dolphin 7.0.x - viewFriends.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52088/info Dolphin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

F*EX 2010020820111129-2 - Multiple Cross-Site Scripting Vulnerabilities

FEX 2010020820111129-2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52085/info FEX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker t...

Joomla! Component Machine - Multiple SQL Injections

Joomla! Component Machine - Multiple SQL Injections source: https://www.securityfocus.com/bid/52095/info The Machine component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! Component Machine - Multiple SQL Injections

source: https://www.securityfocus.com/bid/52095/info The Machine component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Joomla! Component com_x-shop - 'idd' SQL Injection

source: https://www.securityfocus.com/bid/52077/info The X-Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Joomla! Component com_xcomp - Local File Inclusion

source: https://www.securityfocus.com/bid/52078/info The Xcomp component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitra...

Joomla! Component com_xvs - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/52091/info The 'comxvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...

Joomla! Component com_xvs - Controller Local File Inclusion

Joomla! Component comxvs - Controller Local File Inclusion source: https://www.securityfocus.com/bid/52091/info The 'comxvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability t...

ButorWiki 3.0 - service Cross-Site Scripting

ButorWiki 3.0 - service Cross-Site Scripting source: https://www.securityfocus.com/bid/52059/info ButorWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Pandora FMS 4.0.1 - 'sec2' Local File Inclusion

source: https://www.securityfocus.com/bid/52058/info Pandora FMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Th...

JaWiki - versionNo Cross-Site Scripting

JaWiki - versionNo Cross-Site Scripting source: https://www.securityfocus.com/bid/52060/info JaWiki is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Tube Ace - q Cross-Site Scripting

Tube Ace - q Cross-Site Scripting source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Impulsio CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/52063/info Impulsio CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CMS Faethon 1.3.4 - 'articles.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/52053/info CMS Faethon is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...

Impulsio CMS - id SQL Injection

Impulsio CMS - id SQL Injection source: https://www.securityfocus.com/bid/52063/info Impulsio CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

Tube Ace - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52046/info Tube Ace is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...