Magic List Pro - view_archive.cfm?ListID SQL Injection

Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...

Magic Forum Personal - 'view_thread.cfm' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to inject malicious SQL code into database queries, and...

CVE-2005-4034

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 pg, and 3 sortb parameters to a index.php; 4 cid parameter to b gift.php and c fq.php; and 5 cat parameter to d articles.php...

CVE-2005-4034

CVE-2005-4034 describes multiple SQL injection vulnerabilities in Web4Future eDating Professional 5, enabling remote attackers to execute arbitrary SQL via the parameters s, pg, and sortb to index.php; cid to gift.php and fq.php; and cat to articles.php. Affected product: Web4Future eDating Profe...

CVE-2005-4034

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 pg, and 3 sortb parameters to a index.php; 4 cid parameter to b gift.php and c fq.php; and 5 cat parameter to d articles.php...

MailEnable IMAPD W3C Logging Buffer Overflow

This module exploits a buffer overflow in the W3C logging functionality of the MailEnable IMAPD service. Logging is not enabled by default and this exploit requires a valid username and password to exploit the flaw. MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1...

CVE-2005-3993

Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service crash via invalid IMAP commands...

CVE-2005-3993

CVE-2005-3993 affects MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. The issue is multiple unspecified vulnerabilities that allow a denial of service (crash) via invalid IMAP commands. The provided documents do not specify the root cause details, affected versi...

Web4Future eDating Professional 5.0 - fq.php?cid SQL Injection

Web4Future eDating Professional 5.0 - fq.php?cid SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using i...

Web4Future eDating Professional 5.0 - articles.php?cat SQL Injection

Web4Future eDating Professional 5.0 - articles.php?cat SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before...

Web4Future eDating Professional 5.0 - index.php Multiple SQL Injections

Web4Future eDating Professional 5.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input befor...

Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection

Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using...

CVE-2005-3993

Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service crash via invalid IMAP commands...

Web4Future Affiliate Manager PRO SQL inj. vuln.

Web4Future Affiliate Manager PRO SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html vendor:http://www.web4future.com/products.php?p=aff affected version:4.1 and prior Product Description: Affilia...

Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

CVE-2005-3813

IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...

CVE-2005-3813

IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...