Classified Script - c-BrowseClassified Cross-Site Scripting

source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Classified Script - c-BrowseClassified Cross-Site Scripting

Classified Script - c-BrowseClassified Cross-Site Scripting source: https://www.securityfocus.com/bid/48564/info Classified Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrar...

Joomla! Component com_jr_tfb - Controller Local File Inclusion

Joomla! Component comjrtfb - Controller Local File Inclusion source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabili...

A Really Simple Chat Multiple XSS Vulnerabilities

A Really Simple Chat is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

iMesh 10.0 - IMWebControl.dll ActiveX Control Buffer Overflow

iMesh 10.0 - IMWebControl.dll ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/48550/info iMesh is prone to a buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting this issue allows...

CVE-2011-0083

Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

Design/Logic Flaw

Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

Novell File Reporter Agent XML Parsing Stack Buffer Overflow (CVE-2011-0994)

A stack buffer overflow vulnerability has been reported in the Agent component of Novell File Reporter. The vulnerability is due to improper boundary checks of user-supplied NAME tags in the input XML. The vulnerability is triggered upon parsing of a malicious XML tag with overly long content...

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48471/info Joomla! CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute...

ManageEngine ServiceDesk Plus FileDownload.jsp FILENAME Parameter Traversal Arbitrary File Access

The installed version of ManageEngine ServiceDesk Plus fails to sanitize user-supplied input to the 'FILENAME' parameter of the 'workorder/FileDownload.jsp' script of directory traversal sequences when 'module' is set to 'agent' before using it to return the contents of a file. An unauthenticated...

Joomla! Component com_morfeoshow - idm SQL Injection

Joomla! Component commorfeoshow - idm SQL Injection source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections

WordPress Plugin Pretty Link Lite 1.4.56 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48469/info The 'Pretty Link Lite' plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an...

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48455/info Mambo CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Joomla! Component com_morfeoshow - 'idm' SQL Injection

source: https://www.securityfocus.com/bid/48452/info The 'commorfeoshow' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities

Mambo 4.6.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48455/info Mambo CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary...

CVE-2011-0083

Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

CVE-2011-2363

Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...

Joomla Component 'com_jresearch' Local File Inclusion Vulnerability

This host is running Joomla and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlacomjresearchlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Component 'comjresearch' Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

Sitemagic CMS - 'SMTpl' Directory Traversal

source: https://www.securityfocus.com/bid/48399/info Sitemagic CMS is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver process...