AbanteCart 1.1.3 (index.php) Multiple Reflected XSS Vulnerabilities

Summary AbanteCart is a free PHP based eCommerce solution for merchants to provide ability creating online business and sell products online quick and efficient. Description AbanteCart suffers from multiple reflected cross-site scripting vulnerabilities. The issues are triggered when input passed...

OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability

Summary OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows, Linux, Mac OS X, and many other platforms. Description The vulnerability is caused due to the improper verification of uploaded files in...

phlyLabs phlyMail Lite 4.03.04 (go param) Open Redirect Vulnerability

Summary phlyMail offers you an interface in the browser to have access to your emails, contacts, appointments, tasks, files and bookmakrs from anyhwere, where you have internet access. This can be your home, workplace, train station, abroad, offroad, in the woods or your own backyard. Description...

Joomla Incapsula 1.4.6_b Cross Site Scripting Vulnerability

Joomla Incapsula component versions 1.4.6b and below suffer from a reflective cross site scripting vulnerability. Joomla Incapsula Component target="blank" class="IFJlink" Click here to upgrade your account Patch: ------ 22: " target="blank" class="IFJlink"Click here to upgrade your account...

NVIDIA Install Application 2.1002.85.551 (NVI2.dll) Unicode Buffer Overflow PoC

Summary NVIDIA install core application for Windows. Description The vulnerability is caused due to a boundary error in NVI2.DLL when handling the value assigned to the 'pDirectory' string variable in the 'AddPackages' function and can be exploited to cause a unicode buffer overflow by inserting ...

PRADO PHP Framework 3.2.0 Arbitrary File Read Vulnerability

Summary PRADO is a component-based and event-driven programming framework for developing Web applications in PHP 5. PRADO stands for PHP Rapid Application Development Object-oriented. Description Input passed to the 'sr' parameter in 'functionaltests.php' is not properly sanitised before being us...

NASA Tri-Agency Climate Education (TrACE) v1.0 SQL Injection Vulnerability

Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...

NASA Tri-Agency Climate Education (TrACE) 1.0 SQL Injection

NASA Tri-Agency Climate Education TrACE v1.0 SQL Injection Vulnerability Vendor: NASA Product web page: http://www.nasa.gov Affected version: 1.0 Summary: The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE...

NASA Tri-Agency Climate Education (TrACE) 1.0 XSS

NASA Tri-Agency Climate Education TrACE v1.0 Multiple XSS Vulnerabilities Vendor: NASA Product web page: http://www.nasa.gov Affected version: 1.0 Summary: The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE...

NASA Tri-Agency Climate Education (TrACE) v1.0 Multiple XSS Vulnerabilities

Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...

ViArt Shop Enterprise 4.1 Arbitrary Command Executio

?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line...

ViArt Shop Enterprise 4.1 - Arbitrary Command Execution

?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line...

ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability

Summary Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line business. Description Input passed to the 'DATA' POST parameter in 'sipsresponse.php' is not properly sanitised before being used to process product payment data. This can be...

ViArt Shop Enterprise 4.1 (post-auth) Multiple Stored XSS Vulnerabilities

Summary Viart Shop is a PHP based e-commerce suite, aiming to provide everything you need to run a successful on-line business. Description ViArt Shop suffers from multiple stored cross-site scripting vulnerabilities. The issues are triggered when input passed via several parameters to several...

Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities

Summary The Spiceworks IT Desktop delivers nearly everything you need to simplify your IT job. Available in a variety of languages, Spiceworks' single, easy-to-use interface combines Network Inventory, Help Desk, Mapping, Reporting, Monitoring and Troubleshooting. And, it connects you with other ...

Express Burn Plus 4.58 Buffer Overflow

!/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs /...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow (PoC)

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you t...

Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC

Summary Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs / .mp3 CDs, Video DVDs, and Data CDs / DVDs / Blu-ray. Description The vulnerability is caused due to a boundary error in the processing of a project file, which can be exploit...

Monstra CMS 1.2.1 - Multiple HTML Injection Vulnerabilities

Monstra CMS 1.2.1 - Multiple HTML Injection Vulnerabilities Monstra 1.2.1 Multiple HTML Injection Vulnerabilities alert1;' / alert2;' / input type="hidden" name="csrf" value="a7de775dce681ae31b7e89...

KindEditor 4.1.2 (name parameter) Reflected XSS Vulnerability

Summary KindEditor online HTML editor is a set of open source, mainly for users on the site to get WYSIWYG editing effects, developers can replace the traditional multi-line text input box textarea KindEditor rich visualization text input box. Description KindEditor is prone to a reflected...