myphpnuke < 1.8.8_8rc2 (xss/sql) Multiple Vulnerabilities

No description provided by source. Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in print.php in myPHPNuk...

NetArtMedia Jobs Portal 1.3 - Multiple SQL Injection Vulnerabilities

No description provided by source. !R4Q!4N H4CK3R NetArtMedia Jobs Portal 1.3 Multiple Sql Injection Vulnerabilities Website : http://www.netartmedia.net Founded By : Encrypt3d.M!nd Home Page : http://encrypt3d.blogspot.com Remote Sql Injections : Affected Files : index.php PoC:...

Land Down Under 800/801 journal.php m Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the...

dotProject 2.1.2 Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30924/info dotProject is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to...

ManageEngine Mobile Application Manager 10 - SQL Injection

No description provided by source. Title: ====== ME Mobile Application Manager v10 - SQL Vulnerabilities Date: ===== 2012-07-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=628 VL-ID: ===== 628 Common Vulnerability Scoring System: ====================================...

Skull-Splitter Guestbook 1.0/2.0/2.2 - Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13632/info Skull-Splitter Guestbook is prone to multiple HTML injection vulnerabilities. It is possible to inject HTML and script code into the title and content of posted messages. The attacker-supplied HTML and script...

NewsAdd <= 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian GNU/Linux Develope...

V3 Chat Instant Messenger - search.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

Add a link 4 - Security Bypass and SQL Injection Vulnerabilities

No description provided by source...

Site Tanitimlari Scripti - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29299/info Site Tanitimlari Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Vanilla 1.1.4 HTML Injection and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30748/info Vanilla is prone to multiple HTML-injection vulnerabilities and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Wordpress 0.6/0.7 Blog.Header.PHP SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/8756/info Wordpress has been reported prone to multiple SQL injection vulnerabilities. The issues have been reported to exist in the blog.header.php script. A lack of sufficient sanitization performed on 'cat' and 'orderb...

PHP Volunteer Management System 1.0.2 - Multiple SQL Injection Vulnerabilities

No description provided by source. Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities: http://www.exploit-db.com/exploits/18941/ Date found: May...

CSDJCMS 程式舞曲 最新 注入三处 (无需登录,官网成功)

简要描述： 同一文件中。 两处无需登录,一处需要注册一个会员。 详细说明： 在app/controllers/home.php中 第一处 public function friendadd header"Expires: Mon, 26 Jul 1997 05:00:00 GMT"; header"Cache-Control: no-cache, must-revalidate"; header"Pragma: no-cache"; if@!eregi$SERVER'SERVERNAME',$SERVER'HTTPREFERER'exit'QQ:848769359';...

Caldera - costview2printers.php?tr SQL Injection

Caldera - costview2printers.php?tr SQL Injection source: https://www.securityfocus.com/bid/67256/info Caldera is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an...

PT-2014-21: Multiple SQL injection vulnerabilities in Wonderware Information Server

The specialists of the Positive Research center have detected multiple SQL injection vulnerabilities in Wonderware Information Server. WIS is vulnerable to SQL Injection vulnerabilities by performing database operations that were unintended by the web application designer and, in some instances,...

CoryApp Cory Support SQL Injection

Exploit Title: CoryApp Cory Support MySQL Injection Vulnerabilities Google Dork: None Date: 02,March 02,2014 Exploit Author: Slotleet Vendor Homepage: http://coryapp.com Software Link: http://coryapp.com/download/?file=6108cd096d1c940dcff7c300ba966934 u have to register Version: None Tested on:...

Command School Student Management System - swbackupbackup_ray2.php Database Backup Direct Request Information Disclosure

Command School Student Management System - swbackupbackupray2.php Database Backup Direct Request Information Disclosure source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection...

Command School Student Management System - swadmin_relations.php?id SQL Injection

Command School Student Management System - swadminrelations.php?id SQL Injection source: https://www.securityfocus.com/bid/64707/info Command School Student Management System is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. A cross-site request...

PT-2014-68: Multiple SQL Injection in InstantCMS

The specialists of the Positive Research center have detected multiple SQL Injection vulnerabilities in InstantCMS. SQL Injection in the cms.php script allows remote attackers to execute arbitrary SQL commands via a specially crafted request. How to fix Update your software up to the latest...