EziScript Google Page Rank 1.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/38266/info EziScript Google Page Rank is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

EziScript Google Page Rank 1.1 - Cross-Site Scripting

EziScript Google Page Rank 1.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/38266/info EziScript Google Page Rank is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38179/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

CommodityRentals CD Rental Software - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/38184/info CommodityRentals CD Rental Software is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38179/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

eZoneScripts Apartment Search Script 'listtest.php' SQL Injection Vulnerability

eZoneScripts Apartment Search Script 'listtest.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/39905/info eZoneScripts Apartment Search Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize...

vBulletin Adsense Component - 'viewpage.php' SQL Injection

source: https://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Zen Time Tracking 2.2 - Multiple SQL Injections

Zen Time Tracking 2.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/38153/info Zen Time Tracking is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

ShopEx Single 4.5.1 - errinfo Cross-Site Scripting

ShopEx Single 4.5.1 - errinfo Cross-Site Scripting source: https://www.securityfocus.com/bid/39941/info ShopEx Single is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code...

ASCET Interactive Huski CMS - 'i' Local File Inclusion

source: https://www.securityfocus.com/bid/38126/info Huski CMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer; other attacks are also possible...

ASCET Interactive Huski Retail - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38129/info Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Invision Power Board 1.3.1 and lower Versions SQL injection vulnerability-vulnerability warning-the black bar safety net

Invision Power Board is a widely used WEB-based program. Invision Power Board there is an input validation vulnerability, a remote attacker could exploit this to performSQL injectionattack. Due to not be able to properly filter user-supplied data, an attacker may by the st parameter in the Insert...

Joomla! Component com_gambling - gamblingEvent SQL Injection

Joomla! Component comgambling - gamblingEvent SQL Injection source: https://www.securityfocus.com/bid/38033/info The 'comgambling' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Component com_gambling - 'gamblingEvent' SQL Injection

source: https://www.securityfocus.com/bid/38033/info The 'comgambling' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

HAWHAW - 'newsread.php' SQL Injection

source: https://www.securityfocus.com/bid/39978/info HAWHAW is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

Site Manager 3.0 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/39973/info Site Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Last Wizardz - id SQL Injection

Last Wizardz - id SQL Injection source: https://www.securityfocus.com/bid/39968/info Last Wizardz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

Joomla! Component com_rsgallery2 2.0 - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/38009/info The 'comrsgallery2' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

NovaBoard 'forums' Parameter SQL Injection Vulnerability

NovaBoard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlyin...

PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability

PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...