maint/modules/home/index.php in Fonality trixbox allows remote malicious users to execute arbitrary commands via shell metacharacters in the lang parameter.
source: wwwsecurityfocuscom/bid/68719/info
ol-commerce is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credential ...
Vulmon