pfSense 2 Beta 4 - graph.php Multiple Cross-Site Scripting Vulnerabilities

pfSense 2 Beta 4 - graph.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44738/info pfSense is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Angel Learning Management System 7.3 - pdaview.asp Cross-Site Scripting

Angel Learning Management System 7.3 - pdaview.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/44689/info Angel Learning Management System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage th...

SweetRice CMS 0.6.7 Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================ SweetRice CMS 0.6.7 Multiple Vulnerabilities ============================================ Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor...

pfSense 2 Beta 4 - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44738/info pfSense is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================ MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability ============================================================ Product: MemHT Portal Vendor: Miltenovik Manojlo...

Kandidat CMS 1.4.2 Cross Site Scripting

================================ Vulnerability ID: HTB22650 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms2.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notification: 19 October 2010...

Online Work Order Suite - Login SQL Injection

Online Work Order Suite - Login SQL Injection source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

XAMPP Cross Site Scripting and Information Disclosure Vulnerabilities

XAMPP is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to obtain sensitive information, steal cookie-based authentication information...

Online Work Order Suite - Login SQL Injection

source: https://www.securityfocus.com/bid/44608/info Online Work Order Suite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

Apache Shiro - Directory Traversal

source: https://www.securityfocus.com/bid/44616/info Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Apache...

WordPress Plugin cformsII 11.513.1 - lib_ajax.php Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin cformsII 11.513.1 - libajax.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44587/info The cformsII plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input...

FrontAccounting Multiple Cross Site Scripting Vulnerabilities

FrontAccounting is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress Plugin cformsII 11.5/13.1 - 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44587/info The cformsII plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Project Jug 1.0.0 - Directory Traversal

Project Jug 1.0.0 - Directory Traversal source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot...

Project Jug 1.0.0 - Directory Traversal

source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot directory. Information harvested may aid i...

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44565/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

SmartOptimizer - Null Character Remote Information Disclosure

source: https://www.securityfocus.com/bid/44578/info SmartOptimizer is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process...

Elastix 2.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44565/info Elastix is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Novaboard v1.1.4 Local File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================== Novaboard v1.1.4 Local File Inclusion Vulnerability =================================================== Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendo...

Feindura CMS Groupware - Multiple Local File Inclusion / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44501/info Feindura CMS is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerabilities using...