SaPHPLesson 2.0 - 'show.php' SQL Injection

source: https://www.securityfocus.com/bid/18117/info SaPHPLesson is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

PHP Script Tools PSY Auction - 'item.php?id' SQL Injection

source: https://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing

source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

Gphotos 1.41.5 - diapo.php?rep Cross-Site Scripting

Gphotos 1.41.5 - diapo.php?rep Cross-Site Scripting source: https://www.securityfocus.com/bid/17967/info Gphotos is prone to multiple input-validation vulnerabilities. The issues include information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the...

phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

phpBB Chart Mod 1.1 - charts.php?id Cross-Site Scripting

phpBB Chart Mod 1.1 - charts.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

Geeklog 1.4 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18154/info Geeklog is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successfu...

EDirectoryPro - Search_result.asp SQL Injection

EDirectoryPro - Searchresult.asp SQL Injection source: https://www.securityfocus.com/bid/17912/info EDirectoryPro is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection

source: https://www.securityfocus.com/bid/17903/info MultiCalendars is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - Discussions.php?forum_id SQL Injection

Creative Software UK Community Portal 1.1 - Discussions.php?forumid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - 'Discussions.php?forum_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/view.asp?searchFor' SQL Injection

source: https://www.securityfocus.com/bid/17877/info Calendar Manager Pro is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Creative Software UK Community Portal 1.1 - 'DiscView.php?forum_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

EvoTopsite 2.0 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17893/info evoTopsite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromi...

Invision Power Board 2.02.1 - index.php SQL Injection

Invision Power Board 2.02.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/17839/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Invision Power Board 2.0/2.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17839/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

CyberBuild - result.asp Multiple Cross-Site Scripting Vulnerabilities

CyberBuild - result.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17829/info CyberBuild is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure...

4Images 1.7.1 - member.php?sessionid SQL Injection

4Images 1.7.1 - member.php?sessionid SQL Injection source: https://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Blog 0.2.3/0.2.4 Mod - 'Weblog_posting.php' SQL Injection

source: https://www.securityfocus.com/bid/17744/info Blog Mod is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...