Vastal I-Tech Cosmetics Zone - 'view_products.php' SQL Injection

source: https://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Joomla! Component com_pressrelease - 'id' SQL Injection

source: https://www.securityfocus.com/bid/36351/info The 'compressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Smart Magician Blog 1.0 - Multiple SQL Injections

Smart Magician Blog 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/43376/info Smart Magician Blog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections

source: https://www.securityfocus.com/bid/44229/info E-Gold Game Series: Pirates of The Caribbean is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Paypal Shopping Cart Script - index.php Multiple Cross-Site Scripting Vulnerabilities

Paypal Shopping Cart Script - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43471/info Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently...

Paypal Shopping Cart Script - 'index.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/43471/info Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection

PhotoPost PHP 3.3.1 - cat Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/35996/info PhotoPost PHP is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection

source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Blog Ink (Blink) - Multiple SQL Injections

source: https://www.securityfocus.com/bid/43284/info Blog Ink Blink is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...

Softbiz Dating Script 1.0 - cat_products.php SQL Injection

Softbiz Dating Script 1.0 - catproducts.php SQL Injection source: https://www.securityfocus.com/bid/35896/info Softbiz Dating Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Clipbucket 1.7.1 - Multiple SQL Injections

Clipbucket 1.7.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/43383/info ClipBucket is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...

phpGroupWare Multiple Input Validation Vulnerabilities

phpGroupWare is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to disclose sensitive information, steal cookie-based authentication credentials, compromise the application, access or...

PHP Scripts Now Hangman - 'index.php?letters' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

PHP Scripts Now Hangman - 'index.php?n' SQL Injection

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

APBook 1.3 - Admin Login Multiple SQL Injections

APBook 1.3 - Admin Login Multiple SQL Injections source: https://www.securityfocus.com/bid/43452/info APBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

PHP Scripts Now Hangman - index.php?letters Cross-Site Scripting

PHP Scripts Now Hangman - index.php?letters Cross-Site Scripting source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

PHP Scripts Now (Multiple Products) - bios.php?rank Cross-Site Scripting

PHP Scripts Now Multiple Products - bios.php?rank Cross-Site Scripting source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

phpDatingClub 'search.php' Cross-Site Scripting and SQL Injection Vulnerabilities

phpDatingClub is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the applicatio...