2051 matches found
XOOPS events Module - id SQL Injection
XOOPS events Module - id SQL Injection source: https://www.securityfocus.com/bid/27890/info The XOOPS 'events' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Joomla! Mambo Component com_profile - oid SQL Injection
Joomla! Mambo Component comprofile - oid SQL Injection source: https://www.securityfocus.com/bid/27851/info The Joomla! and Mambo 'comprofile' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Joomla! Mambo Component com_iigcatalog - cat SQL Injection
Joomla! Mambo Component comiigcatalog - cat SQL Injection source: https://www.securityfocus.com/bid/27883/info The Joomla! and Mambo 'comiigcatalog' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Facile Forms 1.x - catid SQL Injection
Facile Forms 1.x - catid SQL Injection source: https://www.securityfocus.com/bid/27880/info Facile Forms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Joomla! Component iJoomla! com_magazine - pageid SQL Injection
Joomla! Component iJoomla! commagazine - pageid SQL Injection source: https://www.securityfocus.com/bid/27888/info iJoomla 'commagazine' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...
Joomla! Component iJoomla! com_magazine - 'pageid' SQL Injection
source: https://www.securityfocus.com/bid/27888/info iJoomla 'commagazine' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...
Joomla! / Mambo Component com_formtool - 'catid' SQL Injection
source: https://www.securityfocus.com/bid/27884/info The Joomla! and Mambo 'comformtool' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Joomla! / Mambo Component com_genealogy - 'id' SQL Injection
source: https://www.securityfocus.com/bid/27887/info The Joomla! and Mambo 'comgenealogy' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
Joomla! / Mambo Component com_iigcatalog - 'cat' SQL Injection
source: https://www.securityfocus.com/bid/27883/info The Joomla! and Mambo 'comiigcatalog' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
PHP-Nuke Web_Links Module - 'cid' SQL Injection
source: https://www.securityfocus.com/bid/27894/info The PHP-Nuke WebLinks module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
XOOPS 'events' Module - 'id' SQL Injection
source: https://www.securityfocus.com/bid/27890/info The XOOPS 'events' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acce...
Joomla! Mambo Component com_detail - id SQL Injection
Joomla! Mambo Component comdetail - id SQL Injection source: https://www.securityfocus.com/bid/27853/info The Joomla! and Mambo 'comdetail' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...
Yellow Swordfish Simple Forum 1.x - sf-profile.php SQL Injection
Yellow Swordfish Simple Forum 1.x - sf-profile.php SQL Injection source: https://www.securityfocus.com/bid/27854/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
Yellow Swordfish Simple Forum 1.x - 'sf-profile.php' SQL Injection
source: https://www.securityfocus.com/bid/27854/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
WordPress Plugin wp-people 2.0 - 'wp-people-popup.php' SQL Injection
source: https://www.securityfocus.com/bid/27858/info The WordPress 'wp-people' plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...
Joomla! / Mambo Component com_lexikon - 'id' SQL Injection
source: https://www.securityfocus.com/bid/27828/info The Joomla! and Mambo 'comlexikon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection
source: https://www.securityfocus.com/bid/27829/info The Joomla! and Mambo 'comfilebase' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...
Dokeos 1.8.4 - whoisonline.php?id SQL Injection
Dokeos 1.8.4 - whoisonline.php?id SQL Injection source: https://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one arbitrary-file-upload issue...
Yellow Swordfish Simple Forum 1.71.9 - index.php SQL Injection
Yellow Swordfish Simple Forum 1.71.9 - index.php SQL Injection source: https://www.securityfocus.com/bid/27824/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...
Dokeos 1.8.4 - maincalendarmyagenda.php?courseCode Cross-Site Scripting
Dokeos 1.8.4 - maincalendarmyagenda.php?courseCode Cross-Site Scripting source: https://www.securityfocus.com/bid/27792/info Dokeos is prone to multiple input-validation vulnerabilities including five SQL-injection issues, one HTML-injection issue, three cross-site scripting issues, and one...