OneWorldStore DisplayResults.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13249/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...

okul siteleri 'com_mezun' Component SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27755/info 'okul siteleri' is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Ocean12 Calendar Manager 1.0 Admin Form SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13279/info Ocean12 Calendar Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

iGeneric iG Shop 1.x Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12627/info iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL queries...

Help Center Live 1.0/1.2.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by...

DCP-Portal 6.1.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12573/info DCP-Portal is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...

ADC2000 NG Pro 1.2 - SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15595/info ADC2000 NG Pro is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Bit 5 Blog 8.1 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

V3 Chat Instant Messenger - profileview.php membername Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

CommonSense CMS SQL Injection Vulnerability

No description provided by source. Exploit Title: CommonSense CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.sensesites.com/ Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?articleid=SQL Dork : Powered by CommonSense CMS Greetz Explo...

Particle Blogger <= 1.2.1 Archives.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

BosDates 4.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15632/info BosDates is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

Phpdebug 1.1 Debug_test.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21047/info Phpdebug is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlyin...

MidiCart PHP Item_List.PHP SecondGroup Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13514/info MidiCart PHP is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Jax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...

ASPNuke 0.80 Comments.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13315/info ASPNuke is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

Zenoss 2.3.3 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/37802/info Zenoss is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

nullam blog 0.1.2 (lfi/fd/sql/xss) Multiple Vulnerabilities

No description provided by source. -- Salvatore Fresta aka drosophila CWNP444351 Salvatore drosophila Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS +...

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS Vulnerabilities

No description provided by source. !-- PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities Vendor: PilotGroup Ltd Product web page: http://www.elmspro.com Affected version: DEC200701 Summary: eLMS Pro solution is an outstanding and yet simple Learning Management system. Our...

VBulletin 1.0.1 lite/2.x/3.0 /admincp/usertitle.php usertitleid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...