n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to compromise the application,...

Lawrence Osiris DB_eSession 1.0.2 - Class SQL Injection

Lawrence Osiris DBeSession 1.0.2 - Class SQL Injection source: https://www.securityfocus.com/bid/16598/info DBeSession is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an...

NewsPHP - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16339/info NewsPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to...

EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection

source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL injection vulnerability and a local file include...

EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion

source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL injection vulnerability and a local file include...

[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability

Tikiwiki tiki-userpreferences Command Injection Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=335&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written ...

[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability

Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=337&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written i...

Invision Power Top Site List SQLi Vulnerability

Invision Power Top Site List is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

News2Net SQL Injection

DATE ===== 01/11/2005 AFFECTED PRODUCTS ================= News2Net http://www.bemoore.com OVERVIEW ======== The News2Net system is a powerful Newspaper, Magazine and Newsletter publication manager with the following features: - Upload a whole newspaper in seconds. - Add and Edit content as if you...

Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection

source: https://www.securityfocus.com/bid/14776/info WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...

PHPAUCTION Multiple Vulnerabilities

Binary data 3055.prm...

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

CubeCart 2.0.x - view_product.php?product Full Path Disclosure

CubeCart 2.0.x - viewproduct.php?product Full Path Disclosure source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

CubeCart 2.0.x - 'view_cart.php?add' Full Path Disclosure

source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues affect the 'index.php',...

InterAKT Online MX Shop 1.1.1 - SQL Injection

source: https://www.securityfocus.com/bid/12957/info MX Shop is reportedly affected by an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This vulnerability could permit remote attackers to pas...

Phorum 5.0.11 - Read.php SQL Injection

Phorum 5.0.11 - Read.php SQL Injection source: https://www.securityfocus.com/bid/14095/info Phoroum is prone to SQL injection attacks. Insufficient sanitization of user input may allow a malicious user to manipulate the structure and logic of database queries. Successful exploitation could allow...

Silent Storm Portal - Multiple Vulnerabilities

Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1" ---/exploit.html--- That's All! What Happened? The 3rd line of exploit.html injected Administrator level "1" into the database file. 1: Administrator,2: is Normal User. milw0rm.com 2004-09-30...

Oracle Database Server 8.1.7/9.0.x - ctxsys.driload Access Validation

source: https://www.securityfocus.com/bid/11099/info Oracle Database Server is prone to an access validation vulnerability that may permit unprivileged users to execute commands as the DBA. This could compromise the database. SQL exec ctxsys.driload.validatestmt 'create user hacker identified by...

cPanel 5-9 - Passwd SQL Injection

source: https://www.securityfocus.com/bid/10505/info cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL query. The problem...

cPanel 5-9 - Passwd SQL Injection

cPanel 5-9 - Passwd SQL Injection source: https://www.securityfocus.com/bid/10505/info cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using ...