5281 matches found
PHP-Nuke KutubiSitte Module - 'kid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Bedeng PSP 1.1 index.php a.nsub Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
OpenAutoClassifieds <= 1.5.9 SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...
Liga Manager Online 2.0 Joomla! Component Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19234/info Liga Manager Online Joomla! Component is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...
Asbru Web Content Management 6.5/6.6.9 SQL Injection and Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues cou...
phpBB Chart Mod 1.1 charts.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...
Jetbox CMS 2.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24077/info Jetbox is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Foro Domus 2.10 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16154/info Foro Domus is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
Banex PHP MySQL Banner Exchange 2.21 admin.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...
DUportal 3.1.2 inc_poll_voting.asp DAT_PARENT Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...
serverscheck 5.9/5.10 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13810/info ServersCheck is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to disclose...
Instant Photo Gallery 1.0 portfolio.php cat_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...
Entergal MX 2.0 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15631/info Entergal MX is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
OWASP Mantra Security Toolkit - Browser Based Security Framework
OWASP Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source...
PHPOK SQL注射漏洞（官网）
简要描述： 参数过滤不严导致sql注入 详细说明： 测试官网OK http://www.phpok.com/api.php?c=api&f=phpok&id=sublist¶mpid=1%20union%20select%20VERSION,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33%20union%20select%20%20from%20qingganproject%20where%200 漏洞证明：...
Khan Academy: Unchecking hidden parameter is vulnerable to XSS-attack
Unchecking parameter Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them. http://crowdin.khanacademy.org:/login PoC prompt986874"/...
User Cake - Cross-Site Request Forgery
User Cake - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/67604/info User Cake is prone to a cross-site request-forgery vulnerability because it does not properly validate HTTP requests. An attacker can exploit this issue to perform unauthorized actions in the context of a...
PHP-Nuke 'Submit_News' Component - SQL Injection
source: https://www.securityfocus.com/bid/67656/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify data, or exploi...
w3af - Open Source Web Application Security Scanner
w3af , is a Web Application Attack and Audit Framework. The w3af core and it’s plugins are fully written in python, it identifies more than 200 vulnerabilities and reduce your site’s overall risk exposure. Identify vulnerabilities like SQL Injection, Cross-Site Scripting, Guessable credentials,...
