CiscoWorks Common Services Framework 3.1.1 Help Servlet - Cross-Site Scripting

source: https://www.securityfocus.com/bid/47902/info CiscoWorks Common Services is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attack...

PHP Calendar Basic 2.3 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47887/info PHP Calendar Basic is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an unsuspecting user...

allocPSA 1.7.4 - loginlogin.php Cross-Site Scripting

allocPSA 1.7.4 - loginlogin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47860/info allocPSA is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in...

MyChat Plus Multiple Vulnerabilities

This host is running MyChat Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpmychatplusmultvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ phpMyChat Plus Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks GmbH,...

openQRM 4.8 - source_tab Cross-Site Scripting

openQRM 4.8 - sourcetab Cross-Site Scripting source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

eFront 3.6.9 - submitScore.php Cross-Site Scripting

eFront 3.6.9 - submitScore.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

AVS Ringtone Maker 1.6.1 - '.au' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47851/info AVS Ringtone Maker is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application...

eFront 3.6.9 - 'submitScore.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47877/info eFront is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Mambo Component Docman 1.3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/47857/info The 'comdocman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

eFront 3.6.9 - scripts.php Local File Inclusion

eFront 3.6.9 - scripts.php Local File Inclusion source: https://www.securityfocus.com/bid/47870/info eFront is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Mambo Component Docman 1.3.0 - Multiple SQL Injections

Mambo Component Docman 1.3.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/47857/info The 'comdocman' component for Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiti...

Mitel Audio and Web Conferencing 4.4.3.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47874/info Mitel Audio and Web Conferencing is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary script code in the browser of an...

openQRM 4.8 - 'source_tab' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Flash Tag Cloud And MT-Cumulus Plugin - 'tagcloud' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47845/info The Flash Tag Cloud widget and the MT-Cumulus Plugin are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Flash Tag Cloud And MT-Cumulus Plugin - tagcloud Cross-Site Scripting

Flash Tag Cloud And MT-Cumulus Plugin - tagcloud Cross-Site Scripting source: https://www.securityfocus.com/bid/47845/info The Flash Tag Cloud widget and the MT-Cumulus Plugin are prone to a cross-site scripting vulnerability because they fail to properly sanitize user-supplied input. An attacker...

DocMGR 1.1.2 - history.php Cross-Site Scripting

DocMGR 1.1.2 - history.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47861/info DocMGR is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/47784/info Apache Struts is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Successful exploitation requires 'Dynamic Method Invocation' to be enabled by default. An attacker may leverage this...

Calendarix 0.8.20080808 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/47790/info Calendarix is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

Calendarix 0.8.20080808 - Multiple Cross-Site Scripting SQL Injections

Calendarix 0.8.20080808 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/47790/info Calendarix is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied...

poMMo Aardvark PR16.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47786/info poMMo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...