Joomla! Component iJoomla! com_magazine - pageid SQL Injection

Joomla! Component iJoomla! commagazine - pageid SQL Injection source: https://www.securityfocus.com/bid/27888/info iJoomla 'commagazine' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

PHP-Nuke Web_Links Module - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/27894/info The PHP-Nuke WebLinks module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

WordPress Plugin Recipes Blog - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27856/info The WordPress Recipes Blog plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0724

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext in a database, which enables context-dependent attackers to obtain access to user accounts. Affected component: password storage in the engine; root cause: cleartext password s...

Joomla! / Mambo Component com_sermon 0.2 - 'gid' SQL Injection

source: https://www.securityfocus.com/bid/27673/info The Joomla! and Mambo 'comsermon' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ITechClassifieds - 'viewcat.php?CatID' SQL Injection

source: https://www.securityfocus.com/bid/27574/info iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately sanitize user-supplied input. A...

Debian: Security Advisory (DSA-1460-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0343

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06...

CVE-2008-0339

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB01...

DSECRG08-001.txt

Digital Security Research Group DSecRG Advisory DSECRG08-001 Application: Tuned Studios Templates Versions Affected: All Vendor URL: http:/www.tunedstudios.com Bug: Local File Include Exploit: YES Reported: 09.01.2008 Date of Public Advisory: 09.01.2008 Authors: Alexandr Polyakov, Stas Svistunovi...

IBM Rational ClearQuest Username Parameter SQL Injection Vulnerability

IBM Rational ClearQuest is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit ============================================================== // / RUNCMS 1.6 BLIND SQL Injection Exploit get...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

Logaholic - profiles.php?newconfname Cross-Site Scripting

Logaholic - profiles.php?newconfname Cross-Site Scripting source: https://www.securityfocus.com/bid/27003/info Logaholic is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues, a cross-site scripting issue, and an HTML-injection issue. The issues occur...

Plogger plog-rss.php id Parameter SQL Injection

The remote host appears to be running Plogger, an open source photo gallery written in PHP. The version of Plogger installed on the remote host fails to sanitize input to the 'id' parameter of the 'plog-rss.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and...

MRBS 1.2.x - view_entry.php SQL Injection

MRBS 1.2.x - viewentry.php SQL Injection source: https://www.securityfocus.com/bid/26977/info MRBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

CVE-2007-6267

CVE-2007-6267 affects Citrix EdgeSight components: Presentation Server (4.2/4.5), Endpoints (4.2/4.5), and NetScaler EdgeSight (1.0/1.1). The root cause is improper storage of database credentials in configuration files, enabling local users to obtain sensitive information. The available sources ...

Multi-Forums - Directory.php Multiple SQL Injections

Multi-Forums - Directory.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allo...

CVE-2003-1383

WEB-ERP 0.1.4 and earlier are affected by an information-disclosure vulnerability: an HTTP request can retrieve the logicworks.ini file, exposing the MySQL database username and password. Root cause is improper access to the configuration file in the webERP application. Impact is partial confiden...