Horde 3.3.5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde 3.3.5 - '/Administration Interface admin/cmdshell.php?PATH_INFO' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Horde 3.3.5 - Cross-Site Scripting

Horde 3.3.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browse...

Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities

Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41742/info Ez Poll Hoster is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issue...

TenderSystem 0.9.5 - main.php Multiple Local File Inclusions

TenderSystem 0.9.5 - main.php Multiple Local File Inclusions source: https://www.securityfocus.com/bid/41792/info TenderSystem is prone to a multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obta...

Ez Cart - sid Cross-Site Scripting

Ez Cart - sid Cross-Site Scripting source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Ez Cart - index.php Cross-Site Scripting

Ez Cart - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Ez Cart - 'sid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37311/info Ez Cart is prone to is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Ez Cart - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41696/info Ez Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37329/info phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

WS Interactive Automne 4.0 - 228-recherche.php Cross-Site Scripting

WS Interactive Automne 4.0 - 228-recherche.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41686/info Automne is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

gif2png 2.5.2 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/41801/info gif2png is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of th...

Barracuda IM Firewall 'smtp_test.cgi' Cross-Site Scripting Vulnerabilities

Barracuda IM Firewall is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit...

e107 submitnews.php XSS

The version of e107 on the remote host is affected by a cross-site scripting vulnerability because the 'submitnews.php' script fails to properly sanitize user-supplied input. A remote attacker can exploit this by tricking a user into making a specially crafted POST request. There are reportedly...

Zeeways ZeeJobsite - basic_search_result.php Cross-Site Scripting

Zeeways ZeeJobsite - basicsearchresult.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37290/info ZeeJobsite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

Sun Solaris AnswerBook2 Multiple Cross-Site Scripting Vulnerabilities

Sun Solaris AnswerBook2 is reported prone to multiple cross-site scripting vulnerabilities. These issues arise due to insufficient sanitization of user-supplied data facilitating execution of arbitrary HTML and script code in a user's browser. The following specific issues were identified: It is...

Invision Power Board (IP.Board) 3.0.3 - .txt MIME-Type Cross-Site Scripting

Invision Power Board IP.Board 3.0.3 - .txt MIME-Type Cross-Site Scripting source: https://www.securityfocus.com/bid/37263/info Invision Power Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Invision Power Board (IP.Board) 3.0.3 - '.txt' MIME-Type Cross-Site Scripting

source: https://www.securityfocus.com/bid/37263/info Invision Power Board is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Outreach Project Tool 'CRM_path' Parameter Remote File Inclusion Vulnerability

The host is running Outreach Project ToolOPT and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gboutreachprojecttoolrfivuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Outreach Project Tool 'CRMpath' Parameter Remote File Inclusion Vulnerability Authors: Antu Sanadi...

Advanced Image Hosting Script 2.x - search.php Cross-Site Scripting

Advanced Image Hosting Script 2.x - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37233/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...