VulnCheck KEV: CVE-2013-5015

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute...

WeBid - Multiple Cross-Site Scripting / LDAP Injection Vulnerabilities

source: https://www.securityfocus.com/bid/68519/info WeBid is prone to multiple cross-site-scripting vulnerabilities and an LDAP injection vulnerability. An attacker may leverage these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

AtomCMS - SQL Injection Arbitrary File Upload

AtomCMS - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/68437/info AtomCMS is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability. Exploiting these issues could allow an attacker to upload arbitrary files, compromise the application,...

xClassified - ads.php SQL Injection

xClassified - ads.php SQL Injection source: https://www.securityfocus.com/bid/68438/info xClassified is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

ECommPro 3.0 - Admin/Login.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13274/info EcommProV3 is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

eXtrovert software Thyme 1.3 'pick_users.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31063/info eXtrovert software Thyme is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Facile Forms 1.x 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27880/info Facile Forms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Jax Calendar 1.34 Jax_calendar.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Sendy 1.1.9.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Sendy 1.1.9.1 - SQL Injection Vulnerability Date: 2014-04-10 Exploit Author: marduk369 Vendor Homepage: http://sendy.co/ Software Link: http://sendy.co/ Version: 1.1.9.1 root@kali: sqlmap -u 'http://server1/send-to?i=1&c=10'...

InTouch 0.5.1 Alpha User Variable SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16110/info inTouch is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

AvailScript Job Portal Script 'applynow.php' - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31101/info AvailScript Job Portal Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

LANAI CMS 1.2.14 FAQ Module mid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

bcoos 1.0.13 'modules/banners/click.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31941/info The 'bcoos' program is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla Component com_bidding SQL Injection Vulnerability

No description provided by source. Joomla combidding Sql Injection Vulnerability N2n-Hacker ----- [email protected]:[email protected] Searching = option=combidding == http://www.site.com/index.php?option=combidding&id=200' =SQLi-- error = Warning: mysqlfetcharray: supplied argument is not a valid MySQL...

Pars CMS 'RP' Parameter Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38734/info Pars CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

DUware DUforum 3.0/3.1 forums.asp iFor Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...

Fullaspsite ASP Hosting Site listmain.asp cat Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. ...

Click&BaneX Details.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26493/info Click&BaneX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Ipswitch WhatsUp Professional 2005 SP1 LOGIN.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp'...

Zoph 0.7.2.1 Unspecified SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/30116/info Zoph is prone to a cross-site scripting vulnerability and multiple SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...