SupportPRO SupportDesk 3.0 - 'shownews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Hitron Soft Answer Me - 'answers.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42558/info Hitron Soft Answer Me is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

SupportPRO SupportDesk 3.0 - shownews.php Cross-Site Scripting

SupportPRO SupportDesk 3.0 - shownews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36001/info SupportPRO SupportDesk is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

SpiceWorks - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43248/info Spiceworks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

PHP Easy Shopping Cart 3.1R - subitems.php Cross-Site Scripting

PHP Easy Shopping Cart 3.1R - subitems.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44142/info PHP Easy Shopping Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

PHP Easy Shopping Cart 3.1R - 'subitems.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44142/info PHP Easy Shopping Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

PHP Photo Vote 1.3F - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/35996/info PhotoPost PHP is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting

Silurus Classifieds - wcategory.php?ID Cross-Site Scripting source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting

AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

Willscript Auction Website Script - category.php SQL Injection

Willscript Auction Website Script - category.php SQL Injection source: https://www.securityfocus.com/bid/43254/info Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Silurus Classifieds - search.php?keywords Cross-Site Scripting

Silurus Classifieds - search.php?keywords Cross-Site Scripting source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Waverider Systems Perlshop - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/43158/info Perlshop is prone to multiple input-validation vulnerabilities including a nondescript input-validation vulnerability, multiple cross-site scripting vulnerabilities, and a directory-traversal vulnerability because it fails to sufficiently...

Silurus Classifieds - 'category.php?ID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Silurus Classifieds - 'search.php?keywords' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43278/info Silurus System is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting

AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection

source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Payment Processor Script (PPScript) - 'shop.htm' SQL Injection

source: https://www.securityfocus.com/bid/42539/info PPScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Payment Processor Script (PPScript) - shop.htm SQL Injection

Payment Processor Script PPScript - shop.htm SQL Injection source: https://www.securityfocus.com/bid/42539/info PPScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...