DUware DUclassmate 1.x - edit.asp?iPro SQL Injection

DUware DUclassmate 1.x - edit.asp?iPro SQL Injection source: https://www.securityfocus.com/bid/14036/info DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit coul...

NEXTWEB (i)Site - login.asp SQL Injection

NEXTWEB iSite - login.asp SQL Injection source: https://www.securityfocus.com/bid/13834/info NEXTWEB iSite is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

Calendarix 0.8.20071118 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13825/info Calendarix is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting the SQL-injection issues could allow attackers to compromise t...

MyBulletinBoard (MyBB) RC4 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to multiple SQL injection vulnerabilities...

Calendarix 0.8.20071118 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

Calendarix 0.8.20071118 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13825/info Calendarix is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize...

Qualiteam X-Cart 4.0.8 - product.php Multiple Cross-Site Scripting Vulnerabilities

Qualiteam X-Cart 4.0.8 - product.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplie...

Qualiteam X-Cart 4.0.8 - home.php Multiple SQL Injections

Qualiteam X-Cart 4.0.8 - home.php Multiple SQL Injections source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - 'product.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'error_message.php?id' SQL Injection

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - search.php?mode SQL Injection

Qualiteam X-Cart 4.0.8 - search.php?mode SQL Injection source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabiliti...

HelpCenter Live! 1.0/1.2.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/13666/info Help Center Live is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application is affected by multiple HTML injection...

PortailPHP 1.3 - ID SQL Injection

PortailPHP 1.3 - ID SQL Injection source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

PortailPHP 1.3 - 'ID' SQL Injection

source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

MWChat 6.8 - 'chat.php' SQL Injection

source: https://www.securityfocus.com/bid/15198/info MWChat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Sigma ISP Manager 6.6 - Sigmaweb.dll SQL Injection

Sigma ISP Manager 6.6 - Sigmaweb.dll SQL Injection source: https://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query...

JGS-Portal 3.0.13.0.2 - jgs_portal_viewsgraf.php?tag SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalviewsgraf.php?tag SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

JGS-Portal 3.0.1/3.0.2 - 'jgs_portal.php?anzahl_beitraege' SQL Injection

source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of the SQL injection issues could...

NPDS 4.8/5.0 - 'pollcomments.php?thold' SQL Injection

source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...

NPDS 4.8/5.0 - 'comments.php?thold' SQL Injection

source: https://www.securityfocus.com/bid/13649/info NPDS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'thold' parameter. Successful exploitation could result in a compromise of the application,...