CyberStrong EShop 4.2 - '20review.asp' SQL Injection

source: https://www.securityfocus.com/bid/14101/info CyberStrong eShop is prone to an SQL-injection vulnerability. As a result, the attacker may modify the structure and logic of an SQL query that is made by the application. The attacker may accomplish this by passing malicious SQL syntax to the...

Dynamic Biz Website Builder (QuickWeb) 1.0 - login.asp SQL Injection

Dynamic Biz Website Builder QuickWeb 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/14083/info Dynamic Biz Website Builder QuickWeb is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or...

DUware DUamazon Pro 3.03.1 - detail.asp?iSub SQL Injection

DUware DUamazon Pro 3.03.1 - detail.asp?iSub SQL Injection source: https://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

DUware DUforum 3.0/3.1 - 'userEdit.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access...

DUware DUamazon Pro 3.03.1 - productDelete.asp?iCat SQL Injection

DUware DUamazon Pro 3.03.1 - productDelete.asp?iCat SQL Injection source: https://www.securityfocus.com/bid/14033/info DUamazon Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

PAFaq beta4 - Database Unauthorized Access

source: https://www.securityfocus.com/bid/13999/info paFaq is prone to an unauthorized access vulnerability regarding the database. This issue is a result of the application failing to perform access validation on the 'backup.php' script. A remote unauthenticated user can invoke the script and...

Ublog Reload 1.0.5 - blog_comment.asp?y SQL Injection

Ublog Reload 1.0.5 - blogcomment.asp?y SQL Injection source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

PAFaq - Administrator 'Username' SQL Injection

source: https://www.securityfocus.com/bid/14003/info paFaq is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...

Cool Cafe Chat 1.2.1 - login.asp SQL Injection

Cool Cafe Chat 1.2.1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13976/info Cool Cafe Chat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an...

Loki Download Manager 2.0 - Catinfo.asp SQL Injection

Loki Download Manager 2.0 - Catinfo.asp SQL Injection source: https://www.securityfocus.com/bid/13900/info Loki Download Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'catinfo.asp' script befor...

Mailutils: SQL Injection

Background GNU Mailutils is a collection of mail-related utilities. Description When GNU Mailutils is built with the "mysql" or "postgres" USE flag, the sqlescapestring function of the authentication module fails to properly escape the "" character, rendering it vulnerable to a SQL command...

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection

Early Impact ProductCart 2.62.7 - viewPrd.asp?idcategory SQL Injection source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...

Active News Manager - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to...

Spread The Word - Multiple SQL Injections

source: https://www.securityfocus.com/bid/13737/info Spread The Word is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromi...

Woltlab Burning Board SQL Injection Vulnerability

GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...

JGS-Portal 3.0.13.0.2 - jgs_portal_mitgraf.php?year SQL Injection

JGS-Portal 3.0.13.0.2 - jgsportalmitgraf.php?year SQL Injection source: https://www.securityfocus.com/bid/13650/info JGS-Portal is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inpu...

Shop-Script - categoryId SQL Injection

Shop-Script - categoryId SQL Injection source: https://www.securityfocus.com/bid/13633/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Shop-Script - ProductID SQL Injection

Shop-Script - ProductID SQL Injection source: https://www.securityfocus.com/bid/13635/info Shop-Script is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

OpenBB 1.0.8 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

DirectTopics 2 - topic.php SQL Injection

DirectTopics 2 - topic.php SQL Injection source: https://www.securityfocus.com/bid/13608/info DirectTopics is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...