TML 0.5 - 'index.php?form' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...

QuickPayPro 3.1 - customer.tickets.view.php Multiple SQL Injections

QuickPayPro 3.1 - customer.tickets.view.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection

source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of t...

ASPBB 0.4 - topic.asp?TID SQL Injection

ASPBB 0.4 - topic.asp?TID SQL Injection source: https://www.securityfocus.com/bid/15859/info ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

QuickPayPro 3.1 - sales.view.php?customerid SQL Injection

QuickPayPro 3.1 - sales.view.php?customerid SQL Injection source: https://www.securityfocus.com/bid/15863/info QuickPayPro is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation ...

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting

Snipe Gallery 3.1.4 - search.php?keyword Cross-Site Scripting source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion

McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...

VCD-db 0.9x - 'search.php?by' SQL Injection

source: https://www.securityfocus.com/bid/15840/info VCD-db is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an...

A-FAQ 1.0 - 'faqDsp.asp?catcode' SQL Injection

source: https://www.securityfocus.com/bid/15741/info A-FAQ is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Blog System 1.2 - index.php?cat SQL Injection

Blog System 1.2 - index.php?cat SQL Injection source: https://www.securityfocus.com/bid/15719/info Blog System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Web4Future Affiliate Manager PRO 4.1 - 'functions.php' SQL Injection

source: https://www.securityfocus.com/bid/15717/info Affiliate Manager PRO is prone to an SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

PHP-Fusion 6.0.109 - messages.php SQL Injection

PHP-Fusion 6.0.109 - messages.php SQL Injection source: https://www.securityfocus.com/bid/15698/info PHP-Fusion is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection

source: https://www.securityfocus.com/bid/15676/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application...

SoftBiz B2B trading Marketplace Script 1.1 - 'selloffers.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

88Scripts Event Calendar 2.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

88Scripts Event Calendar 2.0 - index.php SQL Injection

88Scripts Event Calendar 2.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15658/info 88Scripts Event Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

ASP-Rider 1.6 - default.asp SQL Injection

ASP-Rider 1.6 - default.asp SQL Injection source: https://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

FAQ System 1.1 - viewFAQ.php Multiple SQL Injections

FAQ System 1.1 - viewFAQ.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15640/info FAQ System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...