Audins Audiens 3.3 - setup.php?PATH_INFO Cross-Site Scripting

Audins Audiens 3.3 - setup.php?PATHINFO Cross-Site Scripting Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues...

PHPBB2 - 'Admin_Ug_Auth.php' Administrative Bypass

source: https://www.securityfocus.com/bid/22730/info PHPBB2 is prone to a vulnerability that will let attackers gain administrative access to the application because it fails to properly validate access. Successful exploits may result in a complete compromise of vulnerable applications. User Leve...

Tyger Bug Tracking System 1.1.3 - 'ViewBugs.php?s' SQL Injection

source: https://www.securityfocus.com/bid/22799/info Tyger Bug Tracking System is prone to multiple input-validation vulnerabilities, including one SQL-injection issue and two cross-site scripting issues, because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting

Audins Audiens is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Turuncu Portal 1.0 - H_Goster.asp SQL Injection

Turuncu Portal 1.0 - HGoster.asp SQL Injection source: https://www.securityfocus.com/bid/22591/info Turuncu Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

Turuncu Portal 1.0 - 'H_Goster.asp' SQL Injection

source: https://www.securityfocus.com/bid/22591/info Turuncu Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

ibProArcade 2.5.9+ - 'Arcade.php' SQL Injection

source: https://www.securityfocus.com/bid/22575/info ibProArcade is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Tagit! Tagit2b 2.1.B Build 2 - tagviewer.php Multiple Remote File Inclusions

Tagit! Tagit2b 2.1.B Build 2 - tagviewer.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...

Tagit! Tagit2b 2.1.B Build 2 - tagminmanageTagmins.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminmanageTagmins.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/readconf.php?Admin' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Tagit! Tagit2b 2.1.B Build 2 - '/CONFIG/errmsg.inc.php?configpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/wordfilter.php?Admin' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

eXtreme File Hosting - Arbitrary '.RAR' File Upload

source: https://www.securityfocus.com/bid/22498/info eXtreme File Hosting is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and execute arbitrary PHP script code in the context ...

MySQLNewsEngine - 'Affichearticles.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/22431/info MySQLNewsEngine is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks ar...

EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities

EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/22369/info EasyMoblog is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently saniti...

PHPProbid 5.24 - 'Lang.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22374/info PHPProbid is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/22369/info EasyMoblog is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow a...

Easebay Resources Login Manager - Multiple Input Validation Vulnerabilities

Easebay Resources Login Manager - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/22142/info Easebay Resources Login Manager is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. The...

Login Manager Multiple HTML Injections

Login Manager Multiple HTML Injections Login Manager is a powerful, robust system that enables web administrators to manage website user accounts easily, create membership protected areas, and effortlessly prevent unauthorized user access to secured areas. Login Manager 3 “LM3” uses PHP and MySQL...

Easebay Resources Paypal Subscription - Manager Multiple Input Validation Vulnerabilities

Easebay Resources Paypal Subscription - Manager Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/22141/info Easebay Resources Paypal Subscription Manager is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize...