WordPress WP-FaceThumb Gallery plugin versions 3.1 and higher suffer from a cross site scripting vulnerability.
9beec02367ad1737a52b89f4f90216d274bf0044e74cac21b7b7924057dad896
vBulletin vBShout module versions 6.0.5 and below suffer from a cross site scripting vulnerability.
462691bf6e33cb4da99f73fd68d72c50e99cf6cb8e3203bd504dcf8a334e3836
Fork CMS version 3.2.4 suffers from cross site scripting and local file inclusion vulnerabilities.
716dc4ef0d0b0a36991f3fe6e8c9e7ea957734c861e7c373e5579347465cdd63
4Images version 1.7.10 suffers from a cross site scripting vulnerability in the administrative panel.
7dd9e0133074644527dd2a56ecee765075f79c519bfc221648d9e2b3e5b1b2f4
Acidcat ASP CMS versions 3.5.1 and 3.5.2 suffer from multiple cross site scripting vulnerabilities.
d83dbc616c5f99929bca4b8bb2acedbe78f10816c081b3a5f0d0ec9d8f6ca014
The administrative panel for WordPress Blog on WordPress.com suffers from a reflective cross site scripting vulnerability.
87662fc54e7b6298ff08f7317f1a8410dcbb4c6454b35404b18429d6ada48103
Pulse Pro CMS version 1.7.2 suffers from a reflective cross site scripting vulnerability.
7ac8b17da44b732b9b90bd09f91ffc20f29f62b91f7658435d9276d8d927ea3d
Fork CMS version 3.1.5 suffers from multiple reflective cross site scripting vulnerabilities.
ce9a1264ed0a258fa8e69b7087ad7b548a63a7017062b50ae45a1bde1d9dbc79
The Google reCAPTCHA WordPress plugin suffers from a cross site scripting vulnerability.
92d795ae233b50ca42875a19a0458ace0fefe494afb9c7fc317c8f989b2c94af
WSN Classifieds versions 6.2.12 and 6.2.18 suffer from cross site scripting and remote SQL injection vulnerabilities.
ec80bf8c704d3c2fbc67354cdd3cb78d2fa65092e98866d3233b3ed135e38b06
eSyndiCat Pro version 2.3.05 suffers from a cross site scripting vulnerability.
a881de1b7ecd810c25106d0c9006ec4cb8cf175600183fbd33ec8e537063deff
eSyndiCat Directory Software versions 2.2 and 2.3 suffer from a cross site scripting vulnerability.
662c6a9c8cd99810c4bea5fd7e48ca68e762fabe8afbf11ec54ca5529abdd774
eSyndiCat Directory Software version 2.3 suffers from a cross site scripting vulnerability.
8b2717c28189ea42188d89f8f06e9f783e9c0cee8b726c0f1302297ccc5824c0
osTicket (Open Source Support Ticket System) suffers from a local file inclusion vulnerability.
3797f8f72deb5008eacc5270ae34a4b3d06f0deb3a795a8e932645e5592353e2
It would appear that the maintainers of the Joomla ProDesk component have not patched the local file inclusion vulnerability that existed in prior versions. This affects versions 1.5 and below.
1dfaf6a49cd24e7bb67b8a0e78d5a9b7009afdbb8219a6b16be4db6fe7d5fabb
SAINT Corporation suffers from cross site scripting and html injection vulnerabilities.
5a25f1ccebe4b816debe0b28e15f9e3b03c4df9856c84019c60c87f14d2b6dae
PHPList version 2.8.11 suffers from a remote SQL injection vulnerability.
0e9de7054d38234df16b6d2d493567f6c566c3c0c9e63c8242473e6b5baff14c
Tenable Network Security suffers from cross site scripting vulnerabilities. They should really get some sort of scanner to check for these things.
3dd86334270978651b9a63f74ce963d15024c686efe144aa15762aaccaec9b9f
TSOKA:CMS versions 1.1, 1.9 and 2.0 suffer from cross site scripting and remote SQL injection vulnerabilities.
ca19794175424edd62bacea2edd85933a145b94c9339d44c184679e5c6c87bda
SiteDone Artist Edition version 2.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
214740011eda163decd5503724d92e46e95548684c0f768fc7766b3c9fd1b771
SiteDone Custom Edition version 2.0 suffers from cross site scripting and remote SQL injection vulnerabilities.
3169d8510c11ed538735f96c47030bf2976a112c48396193b4effe68a919cb60
The vBulletin Radio and TV Player add-on suffers from cross site scripting, iframe injection, and redirect vulnerabilities.
2a658ed82ade2cbe65d85e97696da855037c00a04db06e087702785efc20ec33
DEW-NEWphpLinks version 2.0 suffers from local file inclusion and cross site scripting vulnerabilities.
d82381f3e79bb124a96e9625bd1392b6f7608b4f44c15e2ff326354e9adfd097
The Scout Portal Toolkit version 1.4 suffers from cross site scripting and SQL injection vulnerabilities. The SQL injection vulnerability was already previously discovered in May of 2008.
14f901b8058e4c69671750adba1d4df98618baa6973d8c4082742eb36b4d3b76
phpRS versions 2.6.x and 2.8.x suffer from a remote SQL injection vulnerability in gallery.php.
cd37a62705b90092cec6ee3361131b1700931e182692ee03102eb885c5ef7e27