Webutil 2.3/2.7 - 'webutil.pl' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/28393/info Webutil is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands. These issues occur because the application fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected...

Iatek Knowledge Base - content_by_cat.asp SQL Injection

Iatek Knowledge Base - contentbycat.asp SQL Injection source: https://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

Joomla! / Mambo Component Datsogallery 1.3.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

W-Agora 4.0 - 'create_user.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Iatek PortalApp 4.0 - links.asp SQL Injection

Iatek PortalApp 4.0 - links.asp SQL Injection source: https://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! Mambo Component com_guide - category SQL Injection

Joomla! Mambo Component comguide - category SQL Injection source: https://www.securityfocus.com/bid/28271/info The 'guide' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

XOOPS MyTutorials Module 2.1 - printpage.php SQL Injection

XOOPS MyTutorials Module 2.1 - printpage.php SQL Injection source: https://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection

source: https://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

PHP-Nuke zClassifieds Module - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke Hadith Module - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28171/info The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Batchelor Media BM Classifieds - Multiple SQL Injections

Batchelor Media BM Classifieds - Multiple SQL Injections source: https://www.securityfocus.com/bid/28159/info BM Classifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues cou...

Batchelor Media BM Classifieds - Multiple SQL Injections

source: https://www.securityfocus.com/bid/28159/info BM Classifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

Specimen Image Database - taxonservice.php?dir Remote File Inclusion

Specimen Image Database - taxonservice.php?dir Remote File Inclusion source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...

Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying...

PHP-Nuke KutubiSitte Module - 'kid' SQL Injection

source: https://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke eGallery 3.0 Module - pid SQL Injection

PHP-Nuke eGallery 3.0 Module - pid SQL Injection source: https://www.securityfocus.com/bid/28088/info The eGallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

Mitra Informatika Solusindo Cart - 'p' Parameter SQL Injection Vulnerability

Mitra Informatika Solusindo Cart 'p' Parameter SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28096/info Mitra Informatika Solusindo Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data...

KC Wiki 1.0 - '/minimal/wiki.php?page' Remote File Inclusion

source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

PHP-Nuke Johannes Hass Gaestebuch 2.2 Module - id SQL Injection

PHP-Nuke Johannes Hass Gaestebuch 2.2 Module - id SQL Injection source: https://www.securityfocus.com/bid/28063/info The 'gaestebuch' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Barryvan Compo Manager 0.3 - 'main.php' Remote File Include Vulnerability

Barryvan Compo Manager 0.3 'main.php' Remote File Include Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28035/info Barryvan Compo Manager is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attack...