Pixie 1.0.4 - HTML Injection Cross-Site Scripting

Pixie 1.0.4 - HTML Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41727/info Pixie is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the issues to execu...

CMSQLite SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== CMSQLite SQL Injection Vulnerability ==================================== Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions June 2010 Vulnerability Type: SQL...

Oracle Business Process Management 10.3.2 - Cross-Site Scripting

Oracle Business Process Management 10.3.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/41617/info Oracle Business Process Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

FireStats Multiple Cross Site Scripting Vulnerabilities

FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FireStats Multiple Cross Site Scripting Vulnerabilities

FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

eliteCMS Multiple Cross Site Scripting Vulnerabilities

eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...

LibTIFF 3.9.4 - Out-Of-Order Tag Type Mismatch Remote Denial of Service

source: https://www.securityfocus.com/bid/41475/info LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users...

dotDefender 4.02 - 'clave' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41541/info dotDefender is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

RunCMS 2.1 - 'magpie_debug.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41551/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

RunCMS 2.1 - magpie_debug.php Cross-Site Scripting

RunCMS 2.1 - magpiedebug.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41551/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities

eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

Joomla! Component Rapid-Recipe - HTML Injection

source: https://www.securityfocus.com/bid/41531/info Joomla! Rapid-Recipe component is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and...

eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities

SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41517/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41548/info FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Real Estate Manager 1.0.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41507/info Real Estate Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Real Estate Manager 1.0.1 - index.php Cross-Site Scripting

Real Estate Manager 1.0.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41507/info Real Estate Manager is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can...

WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin Firestats 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41548/info FireStats is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

Xlight FTP Server Multiple Directory Traversal Vulnerabilities

Xlight FTP Server is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow an attacker to obtain sensitive information which could aid in further attacks. Xlight FTP Server 3.5.5 is vulnerable; other...