Klf-Realty 2.0 - 'detail.asp?property_id' SQL Injection

source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

ASPCart 4.5 - Multiple SQL Injections

ASPCart 4.5 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21152/info ASPCart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

ASPIntranet 2.1 - default.asp SQL Injection

ASPIntranet 2.1 - default.asp SQL Injection source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection

source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Bitweaver 1.x - '/wiki/orphan_pages.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions

Easy Web Portal 2.1.2 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20825/info Easy Web Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Freenews 1.1 - 'Aff_News.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20795/info Freenews is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Mambo Module MOStlyCE 4.5.4 - 'HTMLTemplate.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks ar...

phpBB Add Name Module - Not_Mem.php Remote File Inclusion

phpBB Add Name Module - NotMem.php Remote File Inclusion source: https://www.securityfocus.com/bid/20516/info The Add Name component for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacke...

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

phpBB Add Name Module - 'Not_Mem.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20516/info The Add Name component for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system...

WikyBlog 1.2.x - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20350/info WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

phpBB XS 0.58 - Multiple Remote File Inclusions

phpBB XS 0.58 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20277/info phpBB XS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Geotarget - 'script.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20272/info Geotarget is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting

SAP Internet Transaction Server 6.106.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/20244/info SAP Internet Transaction Server ITS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow...

BandSite CMS 1.1 - interview_content.php Cross-Site Scripting

BandSite CMS 1.1 - interviewcontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to...

BandSite CMS 1.1 - 'help_news.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

BandSite CMS 1.1 - 'photo_content.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

RedBLoG 0.5 - adminconfig.php?root_path Remote File Inclusion

RedBLoG 0.5 - adminconfig.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

RedBLoG 0.5 - adminindex.php?root_path Remote File Inclusion

RedBLoG 0.5 - adminindex.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...