Centreon 1.4.2.3 - index.php Local File Inclusion

Centreon 1.4.2.3 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive...

PHPMyTourney 2 - '/tourney/index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Simple PHP Scripts Gallery 0.x - index.php Cross-Site Scripting

Simple PHP Scripts Gallery 0.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/28056/info Simple PHP Scripts 'gallery' is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...

Centreon 1.4.2 - color_picker.php Multiple Cross-Site Scripting Vulnerabilities

Centreon 1.4.2 colorpicker.php Multiple Cross-Site Scripting Vulnerabilities. CVE-2008-1179. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28043/info Centreon is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied...

Joomla! Mambo Component com_publication - pid SQL Injection

Joomla! Mambo Component compublication - pid SQL Injection source: https://www.securityfocus.com/bid/27970/info The Joomla! and Mambo 'compublication' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! / Mambo Component com_blog - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/27971/info The 'comblog' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Joomla! / Mambo Component com_inter - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27994/info The Joomla! and Mambo 'cominter' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! / Mambo Component com_publication - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/27970/info The Joomla! and Mambo 'compublication' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

PHP-Nuke Sell Module - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/27980/info The 'Sell' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Softbiz Jokes and Funny Pictures Script - sbcat_id SQL Injection

Softbiz Jokes and Funny Pictures Script - sbcatid SQL Injection source: https://www.securityfocus.com/bid/27973/info The Jokes and Funny Pictures script from Softbiz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

Joomla! Mambo Component com_inter - id SQL Injection

Joomla! Mambo Component cominter - id SQL Injection source: https://www.securityfocus.com/bid/27994/info The Joomla! and Mambo 'cominter' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

PHP-Nuke Recipe Module 1.3 - 'recipeid' SQL Injection

source: https://www.securityfocus.com/bid/27955/info The Recipe module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Joomla! Mambo Component com_hello_world - id SQL Injection

Joomla! Mambo Component comhelloworld - id SQL Injection source: https://www.securityfocus.com/bid/27956/info The Joomla! and Mambo 'comhelloworld' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! / Mambo Component com_hello_world - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27956/info The Joomla! and Mambo 'comhelloworld' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

PHP-Nuke Classifieds Module - Details SQL Injection

PHP-Nuke Classifieds Module - Details SQL Injection source: https://www.securityfocus.com/bid/27930/info The Classifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this iss...

Joomla! / Mambo Component com_asortyment - 'katid' SQL Injection

source: https://www.securityfocus.com/bid/27923/info The Joomla! and Mambo 'comasortyment' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

Jinzora 2.7.5 - ajax_request.php Multiple Cross-Site Scripting Vulnerabilities

Jinzora 2.7.5 - ajaxrequest.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may...

XOOPS 'badliege' Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27892/info The XOOPS 'badliege' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Joomla! Mambo Component com_formtool - catid SQL Injection

Joomla! Mambo Component comformtool - catid SQL Injection source: https://www.securityfocus.com/bid/27884/info The Joomla! and Mambo 'comformtool' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Mambo Component com_genealogy - id SQL Injection

Joomla! Mambo Component comgenealogy - id SQL Injection source: https://www.securityfocus.com/bid/27887/info The Joomla! and Mambo 'comgenealogy' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...