5281 matches found
SonicBB 1.0 - Multiple SQL Injections
SonicBB 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
SonicBB 1.0 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...
CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection
CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
Exploit for unknown platform in category web applications ============================================================ Wordpress plugin wordTube = 1.43 wpPATH RFI Vulnerability ============================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
MoinMoin 1.5.x - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23676/info MoinMoin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection
source: https://www.securityfocus.com/bid/23678/info Burak Yilmaz Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
SunShop Shopping Cart 3.5/4.0 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/23662/info Sunshop is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
PHPMySpace Gold 8.10 - article.php SQL Injection
PHPMySpace Gold 8.10 - article.php SQL Injection source: https://www.securityfocus.com/bid/23602/info phpMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass / Multiple SQL Injections
source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...
PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities
FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/22880/info FiSH is prone to multiple remote buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer...
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...
Shop Kit Plus - 'StyleCSS.php' Local File Inclusion
source: https://www.securityfocus.com/bid/22697/info Shop Kit Plus is prone to a local file-include vulnerability because it fails to adequately sanitize user-supplied data. An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of...
CVE-2007-0928
The CVE-2007-0928 issue concerns Virtual Calendar where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download an encoded password via a direct request for pwd.txt, indicating improper access restrictions on sensitive files. Reported...
ovidentia5x-rfi.txt
Author : H0tTurk- Author2: Hotturk web app : OVidentia 5.x Series Remote File İnclude My Site : WwW.H0tTurk.CoM Referance:http://www.securityfocus.com/archive/1/456893 Thanx : DrmaxVirus,GencTurk,Madconfig,EnjexioN,TiT,Kurtefendy,LuciferCihan,Arabian-FighterZ,Sawturk,Ayyıldız,OzelHarekatTim...
Tagit! Tagit2b 2.1.B Build 2 - 'tagviewer.php' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Tagit! Tagit2b 2.1.B Build 2 - 'tag_process.php' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
CVE-2006-6977
CVE-2006-6977 affects FreeTextBox’s Basic Toolbar Selection. The vulnerability is a cross-site scripting flaw in the A tag where a javascript: URI in href or onmouseover can be used to run arbitrary JavaScript in a remote context. Affected component is the toolbar’s HTML output; the underlying is...