WordPress Charset SQL injection vulnerability (re-resend)

Terribly sorry, gmail messed up the GPG signature. Hope this one can get through. === WordPress Charset SQL Injection Vulnerability === Release date: 2007-12-10 Last modified: 2007-12-10 Source: Abel Cheung abelcheung at gmail dot com Affected version: WordPress = 2.3.1 Exploit type: Remote Risk:...

PHPNS 1.1 - shownews.php?id SQL Injection

PHPNS 1.1 - shownews.php?id SQL Injection PHPNS SQL Injection Software: phpns current version v1.1 Vendor link: http://phpns.com Attack: SQL Injection Original advisory: http://14house.blogspot.com/2007/08/phpns-sql-injection.html Discovered by: David Sopas Ferreira a.k.a SmOk3 SQL Injection...

Cisco CallManager 4.2 / CUCM 4.2 - Logon Page 'lang' SQL Injection

source: https://www.securityfocus.com/bid/25480/info Cisco Unified CallManager and Unified Communications Manager are prone to multiple input-validation vulnerabilities because the applications fail to properly sanitize user-supplied input. These issues include a cross-site scripting vulnerabilit...

PHP JackKnife 2.21 - (PHPJK) G_Display.php?iCategoryUnq SQL Injection

PHP JackKnife 2.21 - PHPJK GDisplay.php?iCategoryUnq SQL Injection source: https://www.securityfocus.com/bid/24253/info PHP JackKnife is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. Exploiting these issues could allow an attacker to...

CVE-2007-0091

newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for newsCMS.mdb...

CodeAvalanche News 1.2 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/18031/info CodeAvalanche News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

sBlog.txt

Product : sBlog 0.7.2 Vulnerability :sBlog SQL Injection and Path Disclosure Vulnerability Date of Disclosure : 02/05/06 Bugtraq ID : 17782 Summary: Software: sBlog 0.7.2 Site: http://servous.se/ Description: sBlog is a simple and new PHP Blog. Issue: Conducting a security benchmark on this open...

GLSA-200604-07 : Cacti: Multiple vulnerabilities in included ADOdb

The remote host is affected by the vulnerability described in GLSA-200604-07 Cacti: Multiple vulnerabilities in included ADOdb Several vulnerabilities have been identified in the copy of ADOdb included in Cacti. Andreas Sandblad discovered a dynamic code evaluation vulnerability CVE-2006-0147 and...

RedCMS 0.1 - register.php Multiple Cross-Site Scripting Vulnerabilities

RedCMS 0.1 - register.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application...

Maian Weblog 2.0 - print.php SQL Injection

Maian Weblog 2.0 - print.php SQL Injection source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject...

n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16858/info The 'n8cms' script is prone to multiple input-validation vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. Successful exploitation could allow an attacker to compromise the application,...

Lawrence Osiris DB_eSession 1.0.2 - Class SQL Injection

Lawrence Osiris DBeSession 1.0.2 - Class SQL Injection source: https://www.securityfocus.com/bid/16598/info DBeSession is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an...

NewsPHP - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16339/info NewsPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to...

EZDatabase 2.1.2 - 'index.php?p' Local File Inclusion

source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL injection vulnerability and a local file include...

EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection

source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL injection vulnerability and a local file include...

[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability

Tikiwiki tiki-userpreferences Command Injection Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=335&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written ...

[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability

Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability iDEFENSE Security Advisory 11.10.05 www.idefense.com/application/poi/display?id=337&type=vulnerabilities November 10, 2005 I. BACKGROUND Tikiwiki Community Portal is a full featured, freely available, Wiki/CMS/Groupware system written i...

Invision Power Top Site List SQLi Vulnerability

Invision Power Top Site List is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

News2Net SQL Injection

DATE ===== 01/11/2005 AFFECTED PRODUCTS ================= News2Net http://www.bemoore.com OVERVIEW ======== The News2Net system is a powerful Newspaper, Magazine and Newsletter publication manager with the following features: - Upload a whole newspaper in seconds. - Add and Edit content as if you...

Stylemotion WEB//NEWS 1.4 - 'print.php?id' SQL Injection

source: https://www.securityfocus.com/bid/14776/info WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...