Messageriescripthp 2.0 - '/Contact/contact.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Messageriescripthp 2.0 - 'existepseudo.php?pseudo' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Microsoft PowerPoint未明代码执行漏洞

Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...

Fixit iDms Pro Image Gallery - 'showfile.asp?fid' SQL Injection

source: https://www.securityfocus.com/bid/21282/info Fixit iDMS Pro is prone to multiple input-validation vulnerabilities, including SQL-injection issues and an HTML-injection issue, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabiliti...

Link Exchange Lite 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21225/info Link Exchange Lite is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Enthrallweb eClassifieds - ad.asp Multiple SQL Injections

Enthrallweb eClassifieds - ad.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues coul...

Rapid Classified 3.1 - view_print.asp Cross-Site Scripting

Rapid Classified 3.1 - viewprint.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/21197/info Rapid Classified is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly saniti...

Enthrallweb eClassifieds - 'dirSub.asp?sid' SQL Injection

source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Texas Rankem - tournament_id SQL Injection

Texas Rankem - tournamentid SQL Injection source: https://www.securityfocus.com/bid/21168/info ClickTech Texas Rank'em is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection (1)

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection 1 source: https://www.securityfocus.com/bid/21166/info A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

ASPCart 4.5 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21152/info ASPCart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

20/20 Applications Data Shed 1.0 - 'f-email.asp?itemID' SQL Injection

source: https://www.securityfocus.com/bid/21156/info 20/20 DataShed is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

20/20 Real Estate 3.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21153/info 20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Image Gallery with Access Database - dispimage.asp?id SQL Injection

Image Gallery with Access Database - dispimage.asp?id SQL Injection source: https://www.securityfocus.com/bid/21131/info Image gallery with Access Database is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

Mega Mall - product_review.php Multiple SQL Injections

Mega Mall - productreview.php Multiple SQL Injections source: https://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow ...

MGinternet Property Site Manager - admin_login.asp Multiple SQL Injections

MGinternet Property Site Manager - adminlogin.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to...

Car Site Manager - '/csm/asp/listings.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21066/info Car Site Manager is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

ASP Portal 2.0/3.x/4.0 - 'Default1.asp' SQL Injection

source: https://www.securityfocus.com/bid/21039/info ASP Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Bitweaver 1.x - fisheyeindex.php?sort_mode SQL Injection

Bitweaver 1.x - fisheyeindex.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Omnistar Article Manager - Multiple SQL Injections

source: https://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...