Joomla! Component com_mediaalert - id SQL Injection

Joomla! Component commediaalert - id SQL Injection source: https://www.securityfocus.com/bid/36356/info The 'commediaalert' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting thi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

Adobe RoboHelp Server Unspecified Vulnerability

This host is running Adobe RoboHelp Server and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbadoberobohelpserverunspecifiedvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Adobe RoboHelp Server Unspecified Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

tourismscripts HotelBook - hotel_id Multiple SQL Injections

tourismscripts HotelBook - hotelid Multiple SQL Injections source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

tourismscripts HotelBook - 'hotel_id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/42975/info HotelBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Smart ASP Survey - catid SQL Injection

Smart ASP Survey - catid SQL Injection source: https://www.securityfocus.com/bid/43370/info Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the vulnerability could allow an attacker to steal cookie-based...

Smart Magician Blog 1.0 - Multiple SQL Injections

Smart Magician Blog 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/43376/info Smart Magician Blog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it ...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Smart ASP Survey - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/43370/info Smart ASP Survey is prone to a SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the vulnerability could allow an attacker to steal cookie-based authentication credentials, compromise the...

OpenAutoClassifieds 1.5.9 - SQL Injection

OpenAutoClassifieds 1.5.9 - SQL Injection source: https://www.securityfocus.com/bid/36173/info OpenAutoClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow a...

TGS CMS 0.x SQL Injection / XSS / Disclosure

| | | / | | / | | | \ / | | | / / | |/ \ / / |/ | |/| | | ' \ / | / / | | alertdocument.cookie The Risk: By exploiting this vulnerability, an attacker can inject malicious code in the script and can stole cookies. Fix the vulnerability: Encode output...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CVE-2009-2705

CVE-2009-2705 affects CA SiteMinder. The vulnerability allows remote attackers to bypass J2EE application XSS protections by submitting a request that uses non-canonical, overlong Unicode in place of blacklisted characters, enabling cross-site scripting bypasses. Documented impact is limited to b...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/35996/info PhotoPost PHP is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Perl$hop E-Commerce Input Injection

A while back I was playing around with Perl$hop, which if you are not aware, is an e-commerce script developed by Waverider Systems. XSS Cross Site Scripting, Directory Traversal, Code Execution, and more! Wow, that sure is a lot of vulnerabilities for one product. It would seem as if the...

Apache APR和APR-util整数溢出漏洞

Bugraq ID: 35949 CVE ID：CVE-2009-2412 Apache APR-util是一款可移植运行库，全名为Apache Portable Runtime。 Apache APR Apache Portable Runtime和'APR-util'存在整数溢出，远程攻击者可以利用漏洞以利用此库的应用程序安全上下文执行任意代码。 -当对齐重定位内存块时memory/unix/aprpools.c存在整数溢出错误，可导致缓冲区溢出。 -当对齐重定位内存块时misc/aprrmm.c中的"aprrmmmalloc", "aprrmmcalloc",...

Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection

Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection A while back I was playing around with Perl$hop, which if you are not aware, is an e-commerce script developed by Waverider Systems. XSS Cross Site Scripting, Directory Traversal, Code Execution, and more! Wow, that sure is a l...

CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection

source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...