Lyris List Manager <= 8.8a Multiple Vulnerabilities

Binary data 3324.prm...

Alisveristr E-Commerce Login - Multiple SQL Injections

Alisveristr E-Commerce Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in a...

ASPrider16.txt

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

KBase Express 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15635/info KBase Express is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromis...

FAQ System 1.1 - 'viewFAQ.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15640/info FAQ System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

Softbiz Resource Repository Script - showcats.php?sbcat_id SQL Injection

Softbiz Resource Repository Script - showcats.php?sbcatid SQL Injection source: https://www.securityfocus.com/bid/15585/info Softbiz Resource Repository Script is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Helpdesk Issue Manager 0.x - issue.php?id SQL Injection

Helpdesk Issue Manager 0.x - issue.php?id SQL Injection source: https://www.securityfocus.com/bid/15604/info Helpdesk Issue Manager is prone to multiple SQL injection vulnerabilities. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or m...

Bedeng PSP 1.1 - 'index.php?a.nsub' SQL Injection

source: https://www.securityfocus.com/bid/15583/info Bedeng PSP is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

IsolSoft Support Center 2.2 - Multiple SQL Injections

IsolSoft Support Center 2.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15570/info Support Center is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Wizz Forum - forumreply.php?TopicID SQL Injection

Wizz Forum - forumreply.php?TopicID SQL Injection source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

XMB Forum 1.9.3 - post.php SQL Injection

XMB Forum 1.9.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Woltlab 1.12.x - Info-DB Info_db.php Multiple SQL Injections

Woltlab 1.12.x - Info-DB Infodb.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

[Full-disclosure] Oracle Workflow CSS Vulnerability wf_route

Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...

[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor

Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...

[Full-disclosure] Oracle Workflow CSS Vulnerability wf_monitor

Dear FD-Reader, The Oracle Critical Patch Update October 2005 provides fixes for 2 Cross-Site- Scripting vulnerabilities in Oracle Workflow found by Red-Database-Security GmbH. I know that the severity and impact of CSS bugs is low. My critical security bugs in Oracle e.g. become DBA via the impo...

CVE-2005-3209

CVE-2005-3209 affects Aenovo products (aeNovo, aeNovoShop, aeNovoWYSI). The issue is that password data is stored in plaintext in the control, content, and page tables, facilitating password disclosure for attackers who have database access and enabling privilege escalation. The provided document...

oracle_isqlplus_css.txt

Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Name Cross-Site-Scripting Vulnerability in Oracle iSQLPlus Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...

oracle_xmldb_css.txt

Cross-Site-Scripting Vulnerability in Oracle XMLDB Name Cross-Site-Scripting Vulnerability in Oracle XMLDB Systems Affected Oracle Database 9i Rel. 2 Severity Low Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...

oracle_htmldb_css.txt

Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB Name Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB Systems Affected Oracle HTMLDB Severity Medium Risk Category Cross Site Scripting CSS/XSS Vendor URL http://www.oracle.com This advisory...

Cyphor 0.19 - lostpwd.php?nick SQL Injection

Cyphor 0.19 - lostpwd.php?nick SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database...