eXV2 Module bamaGalerie 3.03 - Remote SQL Injection Vulnerability

No description provided by source. eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :modules/bamagalerie3...

LANAI CMS 1.2.14 EZSHOPINGCART Module cid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Albinator 2.0.8 dlisting.php cid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

DCP-Portal 3.7/4.x/5.x news.php cid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...

TCCMS SQL注入 一个文件多处注入之二

简要描述： 之前看了厂商的回复说的是文章列表那个页面有问题，这次我提交的是图片列表页面存在注入 详细说明： app\controller\picture.class.php 代码如下 public function all $Obj = M$this-objName; $categoryObj = M"category"; $Obj-pageSize = 20; $where = "1=1"; $key = $POST'key'; $cid = $GET'cid'; if $key != "" $where .= " and id = '" . $key . "' or title li...

Amazon Linux AMI : freetype (ALAS-2011-20)

Multiple input validation flaws were found in the way FreeType processed CID-keyed fonts. If a specially crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running...

Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability

This host is installed with Wordpress WP Banners Lite Plugin and is prone to xss vulnerability. OpenVAS Vulnerability Test $Id: gbwordpresswpbannerslitexssvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability Authors: Thanga Prakash S...

WordPress WP Banners Lite Plugin Cross Site Scripting Vulnerability

WordPress WP Banners Lite Plugin is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : freetype (RHSA-2012:0094)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0094 advisory. - freetype: FTBitmapNew integer overflow, FreeType TTVaryGetGlyphDeltas improper input validation CVE-2011-3256 - freetype: Multiple securit...

PT-2012-5509

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.009 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the cid or uids parameters in the...

CVE-2012-4602: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/code/tceselectuserspopup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the 1 cid or 2 uids parameter...

PT-2012-5767

Name of the Vulnerable Software and Affected Versions Php-X-Links version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to "rate.php", the cid parameter to "view.php", or the t parameter to "pop.php". Recommendations...

CVE-2012-4265

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

PT-2012-5293

Name of the Vulnerable Software and Affected Versions Proman Xpress version 5.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the category edit.php file. Recommendations For Proman Xpress version 5.0.1, consider...

CVE-2012-4265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Scientific Linux Security Update : freetype on SL4.x, SL5.x, SL6.x i386/x86_64

FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. The freetype packages for Scientific Linux 4 provide both the FreeType 1 and FreeType 2 font engines. The freetype packages for Scientific...

CentOS Update for freetype CESA-2011:1455 centos4 x86_64

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2011:1455 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for freetype CESA-2011:1455 centos5 x86_64

Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2011:1455 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Debian Security Advisory DSA 2350-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2350-1. OpenVAS Vulnerability Test $Id: deb23501.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2350-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...