eBay Clone Script 2010 - showcategory.php SQL Injection

eBay Clone Script 2010 - showcategory.php SQL Injection source: https://www.securityfocus.com/bid/41200/info eBay Clone Script 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

eBay Clone Script 2010 - 'showcategory.php' SQL Injection

source: https://www.securityfocus.com/bid/41200/info eBay Clone Script 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

AbleSpace 1.0 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/41139/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

PreProject Multi-Vendor Shopping Malls - products.php SQL Injection

PreProject Multi-Vendor Shopping Malls - products.php SQL Injection source: https://www.securityfocus.com/bid/41074/info Pre Multi-Vendor Shopping Malls is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

PreProject Multi-Vendor Shopping Malls - 'products.php' SQL Injection

source: https://www.securityfocus.com/bid/41074/info Pre Multi-Vendor Shopping Malls is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

webConductor - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/41042/info webConductor is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Joomla! Component Gallery XML 1.1 - SQL Injection Local File Inclusion

Joomla! Component Gallery XML 1.1 - SQL Injection Local File Inclusion source: https://www.securityfocus.com/bid/40964/info The Gallery XML Joomla! component is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied...

KubeSupport - lang SQL Injection

KubeSupport - lang SQL Injection source: https://www.securityfocus.com/bid/40970/info KubeSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

2DayBiz ybiz Network Community Script - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/40913/info 2daybiz Network Community Script is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Sell@Site PHP Online Jobs Login - Multiple SQL Injections

Sell@Site PHP Online Jobs Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/40869/info Sell@Site PHP Online Jobs is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting thes...

AneCMS 1.x - '/modules/blog/index.php' HTML Injection

source: https://www.securityfocus.com/bid/40838/info AneCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

AneCMS 1.x - '/modules/blog/index.php' SQL Injection

source: https://www.securityfocus.com/bid/40840/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

Arab Portal 2.2 - members.php SQL Injection

Arab Portal 2.2 - members.php SQL Injection source: https://www.securityfocus.com/bid/40735/info Arab Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

(GREEZLE) Global Real Estate Agent Login - Multiple SQL Injections

source: https://www.securityfocus.com/bid/40676/info GREEZLE - Global Real Estate Agent Site is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromi...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Joomla! Component com_sar_news - id SQL Injection

Joomla! Component comsarnews - id SQL Injection source: https://www.securityfocus.com/bid/40501/info The 'comsarnews' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issu...

CMScout 2.08 - Cross-Site Scripting

CMScout 2.08 - Cross-Site Scripting source: https://www.securityfocus.com/bid/40442/info CMScout is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

osCommerce Visitor Web Stats AddOn - 'Accept-Language' Header SQL Injection

source: https://www.securityfocus.com/bid/40425/info osCommerce Visitor Web Stats is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

BackLinkSpider 1.3.1774 - 'cat_id' SQL Injection

source: https://www.securityfocus.com/bid/40398/info BackLinkSpider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...