Balitbang CMS 3.3 - 'index.php?hal' SQL Injection

source: https://www.securityfocus.com/bid/50797/info CMS Balitbang is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

SonicWALL Aventail SSL-VPN SQL Injection Vulnerability

Exploit for php platform in category web applications Date- 17/11/11 code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Vulnerbility SonicWALL Aventail SSL-VPN is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before usin...

SjXjV 2.3 - post.php SQL Injection

SjXjV 2.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/50426/info SjXjV is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the...

Xenon - id Multiple SQL Injections

Xenon - id Multiple SQL Injections source: https://www.securityfocus.com/bid/50141/info Xenon is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...

GotoCode Online Classifieds - Multiple Vulnerabilities

GotoCode Online Classifieds - Multiple Vulnerabilities Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link :...

GotoCode Online Classifieds Access Bypass

Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=5& Platform : ASP.NET Test...

GotoCode Online Classifieds Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : email protected Impact : High Software Link :...

SonicWALL Viewpoint 6.0 - 'scheduleID' SQL Injection

source: https://www.securityfocus.com/bid/49906/info SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Joomla! Component Biitatemplateshop - groups SQL Injection

Joomla! Component Biitatemplateshop - groups SQL Injection source: https://www.securityfocus.com/bid/49786/info The 'combiitatemplateshop' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Card sharj 1.0 - Multiple SQL Injections

Card sharj 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

Card sharj 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Ay Computer (Multiple Products) - Multiple SQL Injections

Ay Computer Multiple Products - Multiple SQL Injections source: https://www.securityfocus.com/bid/49668/info Multiple Ay Computer products are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

WordPress Plugin Auctions 1.8.8 - 'wpa_id' SQL Injection

source: https://www.securityfocus.com/bid/49625/info Auctions plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

In-link 2.3.4/5.1.3 RC1 - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/49508/info In-link is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

phpWebSite 1.7.1 - 'mod.php' SQL Injection

source: https://www.securityfocus.com/bid/49354/info phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data,...

Joomla! Component Foto - 'id_categoria' SQL Injection

source: https://www.securityfocus.com/bid/48685/info The 'Foto' component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

WordPress Plugin GD Star Rating - 'votes' SQL Injection

source: https://www.securityfocus.com/bid/48166/info The GD Star Rating plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PopScript - 'index.php' Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/48113/info PopScript is prone to a remote file-include vulnerability, an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...

3 university websites database exploited by FR0664/FCA

3 university websites database exploited by FR0664/FCA sci.nu.ac.th - Faculty Of Science - Naresuan University Thaïland frsr.utn.edu.ar - Universidad Tecnológica Nacional - Facultad Regional Santa Fe eswap.ca - Where You Swap To Gain...

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections

Cetera eCommerce - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/47044/info Cetera eCommerce is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...