Jevontech PHPenpals - PersonalID SQL Injection

source: https://www.securityfocus.com/bid/16109/info Jevontech PHPenpals is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

Cerberus Helpdesk 2.649 - cer_KnowledgebaseHandler.class.php?_load_article_details SQL Injection

Cerberus Helpdesk 2.649 - cerKnowledgebaseHandler.class.php?loadarticledetails SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of...

Cerberus Helpdesk 2.649 - addresses_export.php?queues SQL Injection

Cerberus Helpdesk 2.649 - addressesexport.php?queues SQL Injection source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that...

Cerberus Helpdesk 2.649 - 'addresses_export.php?queues' SQL Injection

source: https://www.securityfocus.com/bid/16062/info Cerberus Helpdesk is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are the result of inadequate validation of user-supplied input that will be included in site output or in SQL queries. The cross-site...

Jax Calendar 1.34 - 'jax_calendar.php' SQL Injection

source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

EZ Invoice Inc. EZI 2.0 - 'Invoices.php' SQL Injection

source: https://www.securityfocus.com/bid/16133/info EZI is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application,...

MyBB calendar.php 'month' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'month' parameter of the calendar.php script. A remote, unauthenticated attacker can exploit this issue to manipulate SQL queries, resulting in...

MusicBox 2.3 - type SQL Injection

MusicBox 2.3 - type SQL Injection source: https://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

MusicBox 2.3 - 'type' SQL Injection

source: https://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database...

Quantum Art QP7.Enterprise - news_and_events_new.asp?p_news_id SQL Injection

Quantum Art QP7.Enterprise - newsandeventsnew.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...

Enterprise Connector 1.0.2 - main.php SQL Injection

Enterprise Connector 1.0.2 - main.php SQL Injection source: https://www.securityfocus.com/bid/15984/info Enterprise Connector is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities

Mercury CMS 4.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15967/info Mercury CMS is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitatio...

ODFaq 2.1 - 'faq.php' SQL Injection

source: https://www.securityfocus.com/bid/15958/info ODFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

Bitweaver 1.1.1 - message_box.php?sort_mode Cross-Site Scripting

Bitweaver 1.1.1 - messagebox.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitati...

Miraserver 1.0 RC4 - 'index.php?page' SQL Injection

source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

Miraserver 1.0 RC4 - article.php?cat SQL Injection

Miraserver 1.0 RC4 - article.php?cat SQL Injection source: https://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

ODFaq 2.1 - faq.php SQL Injection

ODFaq 2.1 - faq.php SQL Injection source: https://www.securityfocus.com/bid/15958/info ODFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result...

Acidcat CMS 2.1.13 - ID SQL Injection

Acidcat CMS 2.1.13 - ID SQL Injection source: https://www.securityfocus.com/bid/15933/info Acidcat CMS is prone to multiple input validation vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. Successful exploitation could result in a compromise of the...

Marwel 2.7 - index.php SQL Injection

Marwel 2.7 - index.php SQL Injection source: https://www.securityfocus.com/bid/15959/info Marwel is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...