AShop - Open Redirection Cross-Site Scripting

AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...

XAMPP 'PHP_SELF' Variable Multiple Cross Site Scripting Vulnerabilities

XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

PBCS Technology - articlenav.php SQL Injection

PBCS Technology - articlenav.php SQL Injection source: https://www.securityfocus.com/bid/50577/info PBCS Technology is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...

PBCS Technology - 'articlenav.php' SQL Injection

source: https://www.securityfocus.com/bid/50577/info PBCS Technology is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

IBM HTTP Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

SmartJobBoard - keywords Cross-Site Scripting

SmartJobBoard - keywords Cross-Site Scripting source: https://www.securityfocus.com/bid/50552/info SmartJobBoard is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

XAMPP 1.7.7 - 'PHP_SELF' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50564/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XAMPP 1.7.7 - PHP_SELF Multiple Cross-Site Scripting Vulnerabilities

XAMPP 1.7.7 - PHPSELF Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50564/info XAMPP is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

Oracle NoSQL 11g 1.1.100 R2 - 'log' Directory Traversal

source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver...

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal

Oracle NoSQL 11g 1.1.100 R2 - log Directory Traversal source: https://www.securityfocus.com/bid/50567/info Oracle NoSQL is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

Admin Bot - news.php SQL Injection

Admin Bot - news.php SQL Injection source: https://www.securityfocus.com/bid/50562/info Admin Bot is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

HP Data Protector Notebook Extension Policy Server RequestCopy Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasadminconsolexssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM WebSphere Application Server Admin Console Cross-site Scripting Vulnerability Authors:...

DreamBox DM800 - 'file' Local File Disclosure

source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on...

Joomla! Barter Sites 'com_listing' Component 'category_id' Parameter SQL Injection Vulnerability

This host is running Joomla! Barter Sites component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlabartersitescategoryidparamsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Barter Sites 'comlisting' Component 'categoryid' Parameter SQL Injection...

WordPress Theme Bonus 1.0 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50527/info The Bonus theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

CmyDocument - Multiple Cross-Site Scripting Vulnerabilities

CmyDocument - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50512/info CmyDocument is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

BestShopPro 'str' Parameter Cross Site Scripting and SQL Injection Vulnerabilities

BestShopPro is prone to cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user- supplied data. Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify data, or...

CmyDocument - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50512/info CmyDocument is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...