Extcalendar 2.0 - Multiple SQL Injections HTML Injection Vulnerabilities

Extcalendar 2.0 - Multiple SQL Injections HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/55424/info ExtCalendar is prone to multiple SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploitin...

Sciretech (Multiple Products) - Multiple SQL Injections

source: https://www.securityfocus.com/bid/55390/info Sciretech Multimedia Manager and Sciretech File Manager are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

op5 Monitor <= 5.4.2 Multiple Vulnerabilities

op5 Monitor is prone to an HTML injection vulnerability and an SQL injection SQLi vulnerability because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

phpList 2.10.18 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/54912/info PHPList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

AraDown - 'id' SQL Injection

source: https://www.securityfocus.com/bid/54891/info AraDown is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

tekno.Portal 0.1b - link.php SQL Injection

tekno.Portal 0.1b - link.php SQL Injection source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

ManageEngine Applications Manager - Multiple SQL Injections

ManageEngine Applications Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/54756/info ManageEngine Applications Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL...

MGB - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54348/info MGB is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

LIOOSYS CMS - SQL Injection Information Disclosure

LIOOSYS CMS - SQL Injection Information Disclosure source: https://www.securityfocus.com/bid/54239/info LIOOSYS CMS is prone to an SQL-injection vulnerability and an information-disclosure vulnerability. Exploiting these issues could allow an attacker to obtain sensitive information, compromise t...

PHPAccounts SQL injection and arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Release date: 2012-06-11 Update date: 2012-06-21 Affected system: phpaccounts phpaccounts Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 3 9 2 0 PHPAccounts is for small businesses, freelancers, consulting firms, the simple Web-based...

NetArt Media Jobs Portal - SQL Injection

NetArt Media Jobs Portal - SQL Injection source: https://www.securityfocus.com/bid/54026/info NetArt Media Jobs Portal is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues...

AdaptCMS 2.0.2 TinyURL Plugin - index.php?id SQL Injection

AdaptCMS 2.0.2 TinyURL Plugin - index.php?id SQL Injection source: https://www.securityfocus.com/bid/53764/info AdaptCMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

MyBB 1.6.7之前版本多个安全漏洞

BUGTRAQ ID: 53417 MyBB是一款流行的Web论坛程序。 MyBB 1.6.7之前版本在实现上存在多个安全漏洞，成功利用后可允许攻击者执行任意脚本代码、窃取Cookie身份验证凭证、控制应用、访问或修改数据或利用底层数据库中的其他漏洞并访问敏感数据。 0 MyBB 1.6.x MyBB 1.4.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...

Shawn Bradley PHP Volunteer Management 1.0.2 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/53301/info PHP Volunteer Management is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

Joomla! Component com_videogallery - Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/53237/info The Video Gallery component for Joomla! is prone to local file-include and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using...

MyJobList 0.1.3 - eid SQL Injection

MyJobList 0.1.3 - eid SQL Injection source: https://www.securityfocus.com/bid/52168/info MyJobList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

TestLink - Multiple SQL Injections

source: https://www.securityfocus.com/bid/52086/info TestLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

4Images 1.7.10 - adminindex.php?redirect Arbitrary Site Redirect

4Images 1.7.10 - adminindex.php?redirect Arbitrary Site Redirect source: https://www.securityfocus.com/bid/51774/info 4images is prone to multiple input-validation vulnerabilities including: 1. A cross-site scripting vulnerability. 2. An open-redirection vulnerability. 3. An SQL-injection...

Joomla! Component com_motor - cid SQL Injection

Joomla! Component commotor - cid SQL Injection source: https://www.securityfocus.com/bid/51673/info The 'commotor' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Ultimate Locator - radius SQL Injection

Ultimate Locator - radius SQL Injection source: https://www.securityfocus.com/bid/51653/info Ultimate Locator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...