DataLife Engine 8.3 - engineajaxpm.php?config[lang] Remote File Inclusion

DataLife Engine 8.3 - engineajaxpm.php?configlang Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

DataLife Engine 8.3 - engineajaxaddcomments.php?_REQUEST[skin] Remote File Inclusion

DataLife Engine 8.3 - engineajaxaddcomments.php?REQUESTskin Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

DataLife Engine 8.3 - '/engine/inc/help.php?config[langs]' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

Serialsystem 1.0.4 Beta - list Cross-Site Scripting

Serialsystem 1.0.4 Beta - list Cross-Site Scripting source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script cod...

TestLink 1.8.5 - order_by_login_dir Cross-Site Scripting

TestLink 1.8.5 - orderbylogindir Cross-Site Scripting source: https://www.securityfocus.com/bid/37839/info TestLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

Hitmaaan Gallery 1.3 - Multiple Cross-Site Scripting Vulnerabilities

Hitmaaan Gallery 1.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40711/info Hitmaaan Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Easysitenetwork Jokes Complete Website - searchingred Cross-Site Scripting

Easysitenetwork Jokes Complete Website - searchingred Cross-Site Scripting source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacke...

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities

SurgeFTP 2.x - surgeftpmgr.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting

Mobile Chat 2.0.2 - chatsmileys.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Bits Video Script 2.042.05 - search.php Cross-Site Scripting

Bits Video Script 2.042.05 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40716/info Bits Video Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Easysitenetwork Jokes Complete Website - 'searchingred' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser...

Serialsystem 1.0.4 Beta - 'list' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Easysitenetwork Jokes Complete Website - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser...

Bits Video Script 2.04/2.05 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40716/info Bits Video Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Bits Video Script 2.05 Gold Beta - 'showcasesearch.php?rowptem[template]' Remote File Inclusion

source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute...

Mobile Chat 2.0.2 - 'chatsmileys.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40232/info Mobile Chat is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

SurgeFTP 2.x - 'surgeftpmgr.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37844/info SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in an administrator's browser session in the conte...

TestLink 1.8.5 - 'order_by_login_dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37839/info TestLink is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

SystemTap 1.0 - stat-server Arbitrary Command Injection

SystemTap 1.0 - stat-server Arbitrary Command Injection source: https://www.securityfocus.com/bid/37842/info SystemTap is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrar...

Triburom - forum.php Cross-Site Scripting

Triburom - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40316/info Triburom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...