Matterdaddy Market 1.1 - cat_name Multiple SQL Injections

Matterdaddy Market 1.1 - catname Multiple SQL Injections source: https://www.securityfocus.com/bid/52970/info Matterdaddy Market is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit ma...

Matterdaddy Market 1.1 - 'cat_name' Multiple SQL Injections

source: https://www.securityfocus.com/bid/52970/info Matterdaddy Market is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access...

Sourcefabric Newscoop <= 3.5.4 Multiple Vulnerabilities - Active Check

Sourcefabric Newscoop is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpte...

CitrusDB 2.4.1 - Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/52946/info CitrusDB is prone to a local file-include vulnerability and an SQL-injection vulnerability. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, an...

osCMax 2.5 - adminstats_products_purchased.php Multiple Cross-Site Scripting Vulnerabilities

osCMax 2.5 - adminstatsproductspurchased.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

osCMax 2.5 - adminnew_attributes_include.php Multiple Cross-Site Scripting Vulnerabilities

osCMax 2.5 - adminnewattributesinclude.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

osCMax 2.5 - adminstats_monthly_sales.php?status Cross-Site Scripting

osCMax 2.5 - adminstatsmonthlysales.php?status Cross-Site Scripting source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

osCMax 2.5 - '/admin/htaccess.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

osCMax 2.5 - '/admin/login.php?Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

vBulletin 4.1.10 - announcementid SQL Injection

vBulletin 4.1.10 - announcementid SQL Injection source: https://www.securityfocus.com/bid/52897/info VBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...

Landshop v0.9.2 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Landshop v0.9.2 - Multiple Web Vulnerabilities Introduction: ============= The SAMEDIA LandShop� is an innovative tool for the marketing, sale or rent of any kind of real estate through the internet. The LandShop� user interface ...

EasyPHP - main.php SQL Injection

EasyPHP - main.php SQL Injection source: https://www.securityfocus.com/bid/52781/info EasyPHP is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise...

EasyPHP - 'main.php' SQL Injection

source: https://www.securityfocus.com/bid/52781/info EasyPHP is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modif...

Geeklog 1.8.1 - index.php SQL Injection

Geeklog 1.8.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/52725/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

NextBBS 0.6 - index.php?do Cross-Site Scripting

NextBBS 0.6 - index.php?do Cross-Site Scripting source: https://www.securityfocus.com/bid/52728/info NextBBS is prone to multiple SQL-injection vulnerabilities, a cross-site scripting vulnerability, and an authentication-bypass vulnerability. Exploiting these vulnerabilities could allow an attack...

ClassifiedsGeek.com Vacation Packages - listing_search SQL Injection

ClassifiedsGeek.com Vacation Packages - listingsearch SQL Injection source: https://www.securityfocus.com/bid/52637/info Vacation Packages is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit...

JPM Article Script 6 - page2 SQL Injection

JPM Article Script 6 - page2 SQL Injection source: https://www.securityfocus.com/bid/52528/info JPM Article Script 6 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker ...

Omnistar Live - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/52438/info Omnistar Live is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Wikidforum 2.10 - Search Field Cross-Site Scripting

source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

CreateVision CMS - id SQL Injection

CreateVision CMS - id SQL Injection source: https://www.securityfocus.com/bid/52648/info CreateVision CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromi...