TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection

TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/49393/info TinyWebGallery is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, explo...

S9Y Serendipity 1.5.1 - research_display.php SQL Injection

S9Y Serendipity 1.5.1 - researchdisplay.php SQL Injection source: https://www.securityfocus.com/bid/49395/info Serendipity is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Web Professional - default.php SQL Injection

Web Professional - default.php SQL Injection source: https://www.securityfocus.com/bid/49399/info Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

CS-Cart 2.2.1 - 'products.php' SQL Injection

source: https://www.securityfocus.com/bid/49378/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

phpWebSite 1.7.1 - 'mod.php' SQL Injection

source: https://www.securityfocus.com/bid/49354/info phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data,...

VicBlog - tag SQL Injection

VicBlog - tag SQL Injection source: https://www.securityfocus.com/bid/49304/info VicBlog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

VicBlog - 'tag' SQL Injection

source: https://www.securityfocus.com/bid/49304/info VicBlog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modif...

TotalShopUK 1.7.2 - index.php SQL Injection

TotalShopUK 1.7.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/49263/info TotalShopUK is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacke...

BlueSoft Banner Exchange - 'referer_id' SQL Injection

source: https://www.securityfocus.com/bid/49091/info BlueSoft Banner Exchange is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

Securing Mobile Devices May Be an Impossible Task

LAS VEGAS–The way that things are right now in mobile security, there does not look to be much hope for keeping corporate and personal data secure. A panel of researchers who focus on looking for attacks and bugs at various levels of the mobile device and infrastructure said at Black Hat that the...

Joomla! Component com_community - 'userid' SQL Injection

source: https://www.securityfocus.com/bid/48983/info The 'comcommunity' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

BSNL System Hacked by Pakistan Cyber Army - Users info at risk

BSNL System Hacked by Pakistan Cyber Army - Users info at risk Pakistan Cyber Army claims to hack the BSNL Bharat Sanchar Nigam Ltd.- India's No. 1 Telecommunications Company10,000 User information like name, email, phone number and location & BSNL's internal working of VPN ,detail of circuits an...

Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection

source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Support Incident Tracker (SiT!) 3.63 p1 - report_marketing.php?exc[] SQL Injection

Support Incident Tracker SiT! 3.63 p1 - reportmarketing.php?exc SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in ...

Synergy Software - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48835/info Synergy Software is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

Joomla! Component com_hospital - SQL Injection

source: https://www.securityfocus.com/bid/48689/info The 'comhospital' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component Controller - Itemid SQL Injection

Joomla! Component Controller - Itemid SQL Injection source: https://www.securityfocus.com/bid/48690/info The Controller component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Joomla! Component Foto - 'id_categoria' SQL Injection

source: https://www.securityfocus.com/bid/48685/info The 'Foto' component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Easy Estate Rental - 's_location' SQL Injection

source: https://www.securityfocus.com/bid/48684/info Easy Estate Rental is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, acce...

Sphider 1.3.x - Admin Panel Multiple SQL Injections

Sphider 1.3.x - Admin Panel Multiple SQL Injections source: https://www.securityfocus.com/bid/48647/info Sphider is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...