Zainu 2.0 - SQL Injection

Zainu 2.0 - SQL Injection source: https://www.securityfocus.com/bid/15579/info Zainu is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Netzbrett 1.5.1 - 'P_Entry' SQL Injection

source: https://www.securityfocus.com/bid/15593/info Netzbrett is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

phpWordPress 3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15582/info PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise...

Bedeng PSP 1.1 - 'baca.php?ckode' SQL Injection

source: https://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

IsolSoft Support Center 2.2 - Multiple SQL Injections

IsolSoft Support Center 2.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15570/info Support Center is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Orca Forum 4.3 - 'forum.php' SQL Injection

source: https://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Orca Forum 4.3 - forum.php SQL Injection

Orca Forum 4.3 - forum.php SQL Injection source: https://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Comdev Vote Caster 3.1 - index.php SQL Injection

Comdev Vote Caster 3.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

Tunez 1.21 - songinfo.php?song_id SQL Injection

Tunez 1.21 - songinfo.php?songid SQL Injection source: https://www.securityfocus.com/bid/15548/info Tunez is prone to multiple input validation vulnerabilities. The application is affected by an SQL injection vulnerability and a cross-site scripting issue. Successful exploitation of the SQL...

FreeForum 1.0/1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15559/info freeForum is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation...

Ezyhelpdesk 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15553/info Ezyhelpdesk is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

APBoard - thread.php SQL Injection

APBoard - thread.php SQL Injection source: https://www.securityfocus.com/bid/15513/info APBoard is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of...

APBoard - 'thread.php' SQL Injection

source: https://www.securityfocus.com/bid/15513/info APBoard is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application, disclosure or...

Revize CMS - 'Query_results.jsp' SQL Injection

source: https://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2005-3567

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...

CVE-2005-3567

The CVE-2005-3567 entry concerns the slapd daemon in IBM Tivoli Directory Server (ITDS) versions 5.2.0 and 6.0.0. It describes a vulnerability where binds using SASL EXTERNAL can bypass authentication, enabling an attacker to modify and delete directory data via unspecified attack vectors. The co...

Wizz Forum - ForumAuthDetails.php?AuthID SQL Injection

Wizz Forum - ForumAuthDetails.php?AuthID SQL Injection source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Wizz Forum - 'ForumAuthDetails.php?AuthID' SQL Injection

source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

Wizz Forum - 'forumreply.php?TopicID' SQL Injection

source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

[SA17484] IBM Tivoli Directory Server Unspecified Security Bypass Vulnerability

TITLE: IBM Tivoli Directory Server Unspecified Security Bypass Vulnerability SECUNIA ADVISORY ID: SA17484 VERIFY ADVISORY: http://secunia.com/advisories/17484/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From local network SOFTWARE: IBM Tivoli Identity Manager 4.x...