TBDev is prone to multiple input-validation vulnerabilities, including a remote file-include issue and an SQL-injection issue. A successful exploit may allow an attacker to execute malicious code within the context of the webserver process, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Horde Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
BlueCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Attackers can exploit this issue to execute arbitrary code or cause denial-of-service conditions.
Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to enforce the same-origin policy. An attacker can exploit this issue by enticing an unsuspecting user into viewing a page containing malicious content. Successful exploits will allow attackers to bypass the same-origin policy and obtain potentially sensitive information; other attacks are possible.
This vulnerability occurs in the PHP ext/filter module, specifically in the space trimming functionality. It allows an attacker to trigger a buffer underflow by providing specially crafted input. This can lead to arbitrary code execution or denial of service.
This exploit allows an attacker to gain root access on a system running the /bin/login binary. It works on SPARC and x86 architectures.
The Datetopia Buy Dating Site is vulnerable to cross-site scripting (XSS) due to improper sanitization of user-supplied input. An attacker can inject arbitrary script code into the browser of a victim user, potentially leading to the theft of authentication credentials and other malicious activities.
Pligg CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The vulnerability allows an attacker to include local files on the server by manipulating the 'userlanguage' parameter in the 'load_language.php' script. This can be exploited to read sensitive files like 'passwd' or execute arbitrary PHP code by including a malicious file.
Services By CQR