FusionBB 0.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/13939/info FusionBB is affected by multiple vulnerabilities. These issues arise due to a failure of the application to properly sanitize user-supplied input. The following specific vulnerabilities were identified: The application is affected by a local fi...

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities

Invision Community Blog 1.01.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/13910/info Multiple input validation vulnerabilities reportedly affect Invision Community Blog. These issues are due to a failure of the application to properly sanitize...

Loki Download Manager 2.0 - Catinfo.asp SQL Injection

Loki Download Manager 2.0 - Catinfo.asp SQL Injection source: https://www.securityfocus.com/bid/13900/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'catinfo.asp' script befor...

Loki Download Manager 2.0 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/13898/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'default.asp' script before using it in an SQL query. Successful exploitation...

Loki Download Manager 2.0 - 'Catinfo.asp' SQL Injection

source: https://www.securityfocus.com/bid/13900/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'catinfo.asp' script before using it in an SQL query. Successful exploitation...

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...

Early Impact ProductCart 2.62.7 - modCustomCardPaymentOpt.asp?idc SQL Injection

Early Impact ProductCart 2.62.7 - modCustomCardPaymentOpt.asp?idc SQL Injection source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before...

Early Impact ProductCart 2.6/2.7 - 'modCustomCardPaymentOpt.asp?idc' SQL Injection

source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...

WWWeb Concepts Events System 1.0 - login.asp SQL Injection

WWWeb Concepts Events System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13859/info WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp'...

JiRos Upload System 1.0 - login.asp SQL Injection

JiRos Upload System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Qualiteam X-Cart 4.0.8 - orders.php?mode Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - orders.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - 'register.php?mode' SQL Injection

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'help.php?section' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - help.php?section Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - help.php?section Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - 'orders.php?mode' SQL Injection

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - register.php?mode Cross-Site Scripting

Qualiteam X-Cart 4.0.8 - register.php?mode Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - orders.php?mode SQL Injection

Qualiteam X-Cart 4.0.8 - orders.php?mode SQL Injection source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabiliti...

NPDS 4.8 5.0 - sdv_infos.php?sitename Cross-Site Scripting

NPDS 4.8 5.0 - sdvinfos.php?sitename Cross-Site Scripting source: https://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL...

OS4E - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful exploitation could result in a...