Gilnet News - read_more.php SQL Injection

Gilnet News - readmore.php SQL Injection source: https://www.securityfocus.com/bid/48966/info Gilnet News is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Paliz Portal - Cross-Site Scripting / Multiple SQL Injections

source: https://www.securityfocus.com/bid/48559/info Paliz Portal is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-bas...

Nodesforum - '_nodesforum_node' SQL Injection

source: https://www.securityfocus.com/bid/48451/info Nodesforum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

Nibbleblog 3 - Multiple SQL Injections

Nibbleblog 3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48339/info Nibbleblog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an...

Immophp 1.1.1 - Cross-Site Scripting SQL Injection

Immophp 1.1.1 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/48341/info Immophp is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these...

Sony Pictures hacked and Database Leaked by LulzSec

Sony Pictures hacked and Database Leaked by LulzSec YES ! Sony Hacked Again once more by Lulzsec. The Target is SonyPictures.com and It compromised over 1,000,000 users'personal information, including passwords, email addresses, home addresses,dates of birth, and all Sony opt-in data associated...

Ushahidi 2.0.1 - 'range' SQL Injection

source: https://www.securityfocus.com/bid/48100/info Ushahidi is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48067/info TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

TEDE Simplificado 1.01/S2.04 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/48067/info TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the applicatio...

Joomla! Component com_cbcontact - contact_id SQL Injection

Joomla! Component comcbcontact - contactid SQL Injection source: https://www.securityfocus.com/bid/47856/info The 'comcbcontact' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

Final Fantasy maker Square Enix hacked, 25,000 email addresses Stolen !

Final Fantasy maker Square Enix hacked, 25,000 email addresses Stolen ! Square Enix has confirmed that personal data has been compromised after hackers accessed the Eidos Montreal website. The Deus Ex website was also accessed by the attack from hackers. It's thought that it took place on...

HTB22976: Multiple XSS (Cross Site Scripting) vulnerabilities in poMMo

Vulnerability ID: HTB22976 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinpommo.html Product: poMMo Vendor: Brice Burgess http://pommo.org/ Vulnerable Version: Aardvark PR16.1 Vendor Notification: 26 April 2011 Vulnerability Type: XSS Cross Site Scripting...

HTB22975: SQL injection in Calendarix

Vulnerability ID: HTB22975 Reference: http://www.htbridge.ch/advisory/sqlinjectionincalendarix.html Product: Calendarix Vendor: http://www.calendarix.com http://www.calendarix.com Vulnerable Version: 0.8.20080808 Vendor Notification: 26 April 2011 Vulnerability Type: SQL Injection Risk level: Hig...

Cbseguess.com 4243 users data compromised !

Cbseguess.com 4243 users data compromised ! Hacked By Indian Hacker 'Akash Jain', and almost 4243 users data Compromised...

Calendarix 0.8.20080808 - Multiple Cross-Site Scripting SQL Injections

Calendarix 0.8.20080808 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/47790/info Calendarix is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied...

EmbryoCore 1.03 - index.php SQL Injection

EmbryoCore 1.03 - index.php SQL Injection source: https://www.securityfocus.com/bid/47763/info EmbryoCore is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

ZAPms 1.22 - 'nick' SQL Injection

source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...

EmbryoCore 1.03 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/47763/info EmbryoCore is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

e107 0.7.25 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/47750/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or...

Ultra Marketing Enterprises CMS and Cart - Multiple SQL Injections

source: https://www.securityfocus.com/bid/47421/info Ultra Marketing Enterprises CMS and Cart is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...