Enthrallweb eClassifieds - 'dircat.asp?cid' SQL Injection

source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection (1)

Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection 1 source: https://www.securityfocus.com/bid/21166/info A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

2020 Real Estate 3.2 - Multiple SQL Injections

2020 Real Estate 3.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21153/info 20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

2020 Auto Gallery 3.2 - Multiple SQL Injections

2020 Auto Gallery 3.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21154/info 20/20 Auto Gallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

CandyPress Store 3.5.2 14 - 'openPolicy.asp?policy' SQL Injection

source: https://www.securityfocus.com/bid/21090/info CandyPress Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

ASPIntranet 2.1 - default.asp SQL Injection

ASPIntranet 2.1 - default.asp SQL Injection source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection

source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Inventory Manager - Multiple Input Validation Vulnerabilities

Inventory Manager - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21069/info Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection source: https://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access o...

ECardPro 2.0 - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/20080/info ECardPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18898/info ATutor is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18898/info ATutor is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied...

V3 Chat Instant Messenger - 'mycontacts.php' membername Arbitrary User Buddy List Manipulation

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Cline Communications - Multiple SQL Injections

Cline Communications - Multiple SQL Injections source: https://www.securityfocus.com/bid/18491/info Cline Communications is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

PostNuke 0.76 RC2 - Multiple Input Validation Vulnerabilities

PostNuke 0.76 RC2 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18319/info PostNuke is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection vulnerabilities, because the application fails to properly sanitize...

XUEBook 1.0 - index.php SQL Injection

XUEBook 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/18262/info xueBook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...

IBWd Guestbook 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/18256/info iBWd Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

Invision Power Board 2.0/2.1 - 'index.php?CK' SQL Injection

source: https://www.securityfocus.com/bid/17690/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

Creative Software UK Community Portal 1.1 - 'PollResults.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

EvoTopsite 2.0 - index.php Multiple SQL Injections

EvoTopsite 2.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17893/info evoTopsite is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...