ToendaCMS 0.7 - index.php Cross-Site Scripting

ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/17501/info SimpleBBS is prone to an arbitrary command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to execute arbitrary PHP commands in the...

[eVuln] CyBoards PHP Lite SQL Injection Vulnerability

New eVuln Advisory: CyBoards PHP Lite SQL Injection Vulnerability http://evuln.com/vulns/91/summary.html --------------------Summary---------------- eVuln ID: EV0091 CVE: CVE-2006-1134 Software: CyBoards PHP Lite Sowtware's Web Site:...

PHPWebGallery 1.3.41.5.1 - category.php SQL Injection

PHPWebGallery 1.3.41.5.1 - category.php SQL Injection source: https://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

Widget Property 1.1.19 - Property.php SQL Injection

Widget Property 1.1.19 - Property.php SQL Injection source: https://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script...

DeluxeBB 1.0 - 'pm.php' SQL Injection

source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a compromise of the application,...

ID Team ID Board 1.1.3 - SQL.CLS.php SQL Injection

ID Team ID Board 1.1.3 - SQL.CLS.php SQL Injection source: https://www.securityfocus.com/bid/14204/info ID Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

AutoIndex PHP Script 1.5.2 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14154/info AutoIndex PHP Script is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

RaXnet Cacti 0.50.6.x0.8.x - Graph_Image.php Remote Command Execution Variant

RaXnet Cacti 0.50.6.x0.8.x - GraphImage.php Remote Command Execution Variant source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that...

UBBCentral UBB.Threads 5.5.16.x - download.php?Number SQL Injection

UBBCentral UBB.Threads 5.5.16.x - download.php?Number SQL Injection source: https://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successf...

UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection

source: https://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection source: https://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' scri...

CartWIZ 1.10 - 'Access.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13338/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - 'searchresults.asp' Name Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13343/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

paFaq beta4 - answer.php?offset SQL Injection

paFaq beta4 - answer.php?offset SQL Injection source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...

paFaq beta4 - comment.php Multiple SQL Injections

paFaq beta4 - comment.php Multiple SQL Injections source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successfu...

paFaq beta4 - question.php Multiple SQL Injections

paFaq beta4 - question.php Multiple SQL Injections source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successf...

paFaq beta4 - 'question.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/12582/info paFaq is reportedly affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

[SA14051] phpPgAds "dest" Parameter HTTP Response Splitting Vulnerability

TITLE: phpPgAds "dest" Parameter HTTP Response Splitting Vulnerability SECUNIA ADVISORY ID: SA14051 VERIFY ADVISORY: http://secunia.com/advisories/14051/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpPgAds 2.x http://secunia.com/product/4577/ DESCRIPTION: Te...

[SA13329] Nuked-Klan "Links" Module Script Insertion Vulnerability

TITLE: Nuked-Klan "Links" Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13329 VERIFY ADVISORY: http://secunia.com/advisories/13329/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nuked-Klan 1.x http://secunia.com/product/1015/ DESCRIPTION:...