Datemill - photo_view.php?return Cross-Site Scripting

Datemill - photoview.php?return Cross-Site Scripting source: https://www.securityfocus.com/bid/42896/info Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script...

tourismscripts HotelBook - hotel_id Multiple SQL Injections

tourismscripts HotelBook - hotelid Multiple SQL Injections source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

Datemill - 'photo_view.php?return' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42896/info Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Datemill - 'search.php?st' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42896/info Datemill is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

phpAuction 3.2 - 'lan' Remote File Inclusion

source: https://www.securityfocus.com/bid/36211/info phpAuction is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible...

KingCMS 0.6 - 'CONFIG[AdminPath]' Remote File Inclusion

source: https://www.securityfocus.com/bid/42924/info KingCMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the...

Omnistar Recruiting - resume_register.php Cross-Site Scripting

Omnistar Recruiting - resumeregister.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43163/info Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43163/info Omnistar Recruiting is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

DvBBS 2.0 - boardrule.php SQL Injection

DvBBS 2.0 - boardrule.php SQL Injection source: https://www.securityfocus.com/bid/36282/info DvBBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting

Webformatique Reservation Manager 2.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage thi...

Apache Tomcat 3.2 - 404 Error Page Cross-Site Scripting

Apache Tomcat 3.2 - 404 Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/37149/info Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

Apache Tomcat 3.2 - 404 Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/37149/info Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Webformatique Reservation Manager 2.4 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43003/info Webformatique Reservation Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

PHPMass Real Estate - view_map.php Cross-Site Scripting

PHPMass Real Estate - viewmap.php Cross-Site Scripting source: https://www.securityfocus.com/bid/42452/info PHPMass Real Estate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

SmartVMD 1.3 - ActiveX Control VideoMovementDetection.dll Remote Buffer Overflow

SmartVMD 1.3 - ActiveX Control VideoMovementDetection.dll Remote Buffer Overflow source: https://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attack...

PHPMass Real Estate - 'view_map.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42452/info PHPMass Real Estate is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Property Watch - 'email.php?videoid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42453/info Property Watch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

SmartVMD 1.3 - ActiveX Control 'VideoMovementDetection.dll' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/36217/info SmartVMD ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the context of the...

LiveStreet 0.2 - includeajaxblogInfo.php?asd Cross-Site Scripting

LiveStreet 0.2 - includeajaxblogInfo.php?asd Cross-Site Scripting source: https://www.securityfocus.com/bid/42422/info LiveStreet is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverag...

LiveStreet 0.2 - Comment Topic Header Cross-Site Scripting

LiveStreet 0.2 - Comment Topic Header Cross-Site Scripting source: https://www.securityfocus.com/bid/42422/info LiveStreet is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the...