HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45420/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Microsoft Office PICT Image Converter (CVE-2010-3946) Integer Overflow Vulnerability

Description Microsoft Office is prone to a remote integer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially...

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities

BlogCFC 5.9.6.001 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45395/info BlogCFC is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Microsoft Office FlashPix Image Converter (CVE-2010-3951) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially craft...

FontForge .BDF Buffer Overflow

Source: http://www.securityfocus.com/bid/45162/info FontForge is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue to execute...

Microsoft Office TIFF Image Converter (CVE-2010-3949) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document containing a specially crafted...

Microsoft Office CGM Image Converter (CVE-2010-3945) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document containing a specially crafted...

Articlems 2.0 - 'c[]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41511/info ArticleMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHP TopSites 2.1 - '/rate.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/45389/info PHP TopSites is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script code in t...

Articlems 2.0 - c[] Cross-Site Scripting

Articlems 2.0 - c Cross-Site Scripting source: https://www.securityfocus.com/bid/41511/info ArticleMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

MyBB 1.4.10 - tags.php Cross-Site Scripting

MyBB 1.4.10 - tags.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45388/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Cetera eCommerce - 'banner.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45374/info Cetera eCommerce is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Social Share - vote.php HTTP Response Splitting

Social Share - vote.php HTTP Response Splitting source: https://www.securityfocus.com/bid/45550/info Social Share is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how w...

BizDir 05.10 - f_srch Cross-Site Scripting

BizDir 05.10 - fsrch Cross-Site Scripting source: https://www.securityfocus.com/bid/45342/info BizDir is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

Joomla! Component JExtensions Property Finder - 'sf_id' SQL Injection

source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Joomla! Component com_mailto - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45356/info The 'commailto' component for Joomla! is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...

Joomla! Component JExtensions Property Finder - sf_id SQL Injection

Joomla! Component JExtensions Property Finder - sfid SQL Injection source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

WWWThread 5.0.8 Pro - showflat.pl Cross-Site Scripting

WWWThread 5.0.8 Pro - showflat.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/45303/info WWWThread is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...