phpGroupWare 0.9.x - 'viewticket_details.php?ticket_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11952/info Reportedly PHPGroupWare contains multiple input validation vulnerabilities; it is prone to multiple SQL injection and cross-site scripting issues. These issues are all due to a failure of the application to properly sanitize user-supplied input...

phpGroupWare 0.9.x - index.php Multiple Cross-Site Scripting Vulnerabilities

phpGroupWare 0.9.x - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11952/info Reportedly PHPGroupWare contains multiple input validation vulnerabilities; it is prone to multiple SQL injection and cross-site scripting issues. These issues are all...

sugarsales 1.x2.0 - Multiple Vulnerabilities

sugarsales 1.x2.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11896/info Multiple remote vulnerabilities are reported to exist in SugarSales. The first reported issue is an SQL injection vulnerability. This vulnerability is due to a lack of proper input-validation by the...

IceWarp Web Mail Multiple Flaws (2)

The remote host is running IceWarp Web Mail - a webmail solution available for the Microsoft Windows platform. The remote version of this software is vulnerable to multiple input validation issues that could allow an attacker to compromise the integrity of the remote host. %NASLMINLEVEL 70300 C...

IceWarp Web Mail Multiple Flaws (1)

The remote host is running IceWarp Web Mail - a webmail solution available for the Microsoft Windows platform. The remote version of this software is vulnerable to multiple input validation issues that could allow an attacker to compromise the integrity of the remote host. %NASLMINLEVEL 70300 C...

FreeBSD : SA-04:14.cvs

The remote host is running a version of FreeBSD which contains a version of the 'cvs' utility containing several issues : - An insufficient input validation while processing 'Entry' lines - A double-free issue - An integer overflow when processing 'Max-dotdot' commands - A format string bug when...

TUTOS < 1.1.20040412 Multiple Input Validation Issues

The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...

TUTOS - 'app_new.php?t' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11221/info Tutos is reported prone to multiple remote input-validation vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and SQL-injection attacks. These...

IceWarp Web Mail 3.3.2/5.2.7 - Multiple Remote Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/10920/info IceWarp Web Mail is reported prone to multiple input validation vulnerabilities. It is reported that these issues may be exploited by a remote attacker to conduct SQL Injection, Account Manipulation, Cross-site Scripting, Information disclosure...

myServer 0.6.2 - 'math_sum.mscgi' Multiple Remote Overflows

source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI input. An attacker could exploit t...

MyServer 0.6.2 - math_sum.mscgi Multiple Cross-Site Scripting Vulnerabilities

MyServer 0.6.2 - mathsum.mscgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10831/info Reportedly MyServer is affected by multiple remote vulnerabilities in the 'mathsum.mscgi' example script. These issues are due to a boundary condition error and a...

PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities

PHP-Nuke 6.x7.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuk...

Liferay Enterprise Portal 1.x2.x5.0.2 - Multiple Cross-Site Scripting Vulnerabilities

Liferay Enterprise Portal 1.x2.x5.0.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10402/info It has been reported that Liferay Enterprise Portal is susceptible to multiple cross-site scripting and HTML injection vulnerabilities. User-supplied data fro...

[UNIX] P4DB Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Adam Webb NukeJokes 1.72.0 Module - modules.php?jokeid SQL Injection

Adam Webb NukeJokes 1.72.0 Module - modules.php?jokeid SQL Injection source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly...

Adam Webb NukeJokes 1.72.0 Module - Multiple Cross-Site Scripting Vulnerabilities

Adam Webb NukeJokes 1.72.0 Module - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to...

Adam Webb NukeJokes 1.7/2.0 Module - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/10306/info It has been reported that the NukeJokes module is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. Multiple SQL injection issues exists du...

Coppermine Photo Gallery 1.2.0 RC4 - init.inc.php Remote File Inclusion

Coppermine Photo Gallery 1.2.0 RC4 - init.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because t...

Coppermine Photo Gallery 1.2.0 RC4 - 'init.inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly sanitize and validate user-supplied inp...

Coppermine Photo Gallery 1.2.2b - 'theme.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly sanitize and validate user-supplied inp...