Telekorn Signkorn Guestbook 1.x admin/preview.php dir_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...

Telekorn Signkorn Guestbook 1.x help/en/adminhelp2.php dir_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...

Yellow Swordfish Simple Forum 1.10/1.11'topic' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27823/info Simple Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Software DEP Classified Script 2.5 - SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Software DEP Classified Script 2.5 SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: h0rd Contact: h0rdatnull.net homepage: http://h0rd.net download:...

MidiCart ASP Item_Show.ASP ID2006quant Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21273/info MidiCart ASP is prone to an SQL injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Sigma ISP Manager 6.6 Sigmaweb.DLL SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query. Successful exploitatio...

Def_Blog 1.0.3 comlook.php article Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/30289/info DefBlog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

2BGal 2.5.1 - Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12083/info A remote SQL injection vulnerability reportedly affects 2Bgal. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in an SQL query. An attacker may...

PHP-Calendar 1.1 update08.php configfile Parameter Traversal Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/37450/info PHP-Calendar is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to execute arbitrary...

VihorDesign Index.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17227/info VihorDesign is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrar...

Joomla! and Mambo 'com_activities' Component - 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27820/info The Joomla! and Mambo 'comactivities' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

SoftBiz Dating Script 1.0 featured_photos.php browse Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow a...

Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...

Accelerated E Solutions SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15077/info Accelerated E Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHPBook 1.x Mail Field PHP Code Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16106/info phpBook is prone to a vulnerability that may let remote attackers inject arbitrary PHP code into the application. This code may then be executed by visiting pages that include the injected code. E-mail field:...

Prodder 0.4 Arbitrary Shell Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18068/info Prodder is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute...

DO-CMS 3.0 'p' Parameter Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/32906/info DO-CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

INFINICART added_to_cart.asp productid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit ...

Omegasoft Insel 7 Authentication Bypass Vulnerability and User Enumeration Weakness

No description provided by source. source: http://www.securityfocus.com/bid/27210/info Omegasoft Insel is prone to an authentication bypass vulnerability and a user-enumeration weakness. An attacker can exploit these issues to obtain sensitive information and gain unauthorized access to the...

YeSiL KoRiDoR Ziyaretçi Defteri 'index.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27518/info YeSiL KoRiDoR Ziyaretçi Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...