Tiki Wiki CMS Groupware 8.1 - show_errors HTML Injection

Tiki Wiki CMS Groupware 8.1 - showerrors HTML Injection source: https://www.securityfocus.com/bid/51128/info Tiki Wiki CMS Groupware is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied...

Joomla! Component com_tsonymf - 'idofitem' SQL Injection

source: https://www.securityfocus.com/bid/51125/info Joomla! 'comtsonymf' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

PHP Booking Calendar 10e - page_info_message Cross-Site Scripting

PHP Booking Calendar 10e - pageinfomessage Cross-Site Scripting source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

CA SiteMinder 'target' Parameter Cross-Site Scripting Vulnerability

CA SiteMinder is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Video Community Portal - 'userID' SQL Injection

source: https://www.securityfocus.com/bid/51108/info Video Community Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Flirt-Projekt 4.8 - 'rub' SQL Injection

source: https://www.securityfocus.com/bid/51106/info Flirt-Projekt is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Social Network Community 2 - 'userID' SQL Injection

source: https://www.securityfocus.com/bid/51107/info Social Network Community is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

Fork CMS 3.1.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51045/info Fork CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

BrowserCRM 5.100.1 - contact_id SQL Injection

BrowserCRM 5.100.1 - contactid SQL Injection source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

HP OpenView Network Node Manager Multiple RCE Vulnerabilities

HP OpenView Network Node Manager NNM is prone to multiple remote code-execution vulnerabilities because it fails to sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

BrowserCRM 5.100.1 - 'login[]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

BrowserCRM 5.100.1 - 'contact_id' SQL Injection

source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

BrowserCRM 5.100.1 - clients.php Cross-Site Scripting

BrowserCRM 5.100.1 - clients.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting thes...

BrowserCRM 5.100.1 - URI Cross-Site Scripting

BrowserCRM 5.100.1 - URI Cross-Site Scripting source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script co...

BrowserCRM 5.100.1 - URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/51060/info Browser CRM is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting

WordPress Plugin flash-album-gallery - flagshow.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51031/info flash-album-gallery plug-in for WordPress is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

vsftpd < 2.3.5 Buffer Overflow Vulnerability

vsftpd is prone to a heap based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...