W-Agora 4.0 - delete_user.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - deleteuser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Iatek Knowledge Base - 'content_by_cat.asp' SQL Injection

source: https://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Iatek PortalApp 4.0 - links.asp SQL Injection

Iatek PortalApp 4.0 - links.asp SQL Injection source: https://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Iatek PortalApp 4.0 - 'links.asp' SQL Injection

source: https://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

Chris LaPointe Download Center 1.2 - category Cross-Site Scripting

Chris LaPointe Download Center 1.2 - category Cross-Site Scripting source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Chris LaPointe Download Center 1.2 - 'category' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

XOOPS MyTutorials Module 2.1 - 'printpage.php' SQL Injection

source: https://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Chris LaPointe Download Center 1.2 - search Cross-Site Scripting

Chris LaPointe Download Center 1.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Chris LaPointe Download Center 1.2 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker...

MAXdev My eGallery Module 3.04 - For Xoops gid SQL Injection

MAXdev My eGallery Module 3.04 - For Xoops gid SQL Injection source: https://www.securityfocus.com/bid/28220/info MAXdev My eGallery module for Xoops is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Jeebles Directory 2.9.60 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28221/info Jeebles Directory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

PHP-Nuke zClassifieds Module - cat SQL Injection

PHP-Nuke zClassifieds Module - cat SQL Injection source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

PHP-Nuke NukeC30 3.0 Module - id_catg SQL Injection

PHP-Nuke NukeC30 3.0 Module - idcatg SQL Injection source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Mambo Component ensenanzas - id SQL Injection

Joomla! Mambo Component ensenanzas - id SQL Injection source: https://www.securityfocus.com/bid/28196/info The 'ensenanzas' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

PHP-Nuke Hadith Module - cat SQL Injection

PHP-Nuke Hadith Module - cat SQL Injection source: https://www.securityfocus.com/bid/28171/info The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

PHP-Nuke 4nAlbum Module 0.92 - pid SQL Injection

PHP-Nuke 4nAlbum Module 0.92 - pid SQL Injection source: https://www.securityfocus.com/bid/28162/info The 4nAlbum module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

PHP-Nuke 4nAlbum Module 0.92 - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/28162/info The 4nAlbum module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

PHP-Nuke Hadith Module - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28171/info The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Batchelor Media BM Classifieds - Multiple SQL Injections

source: https://www.securityfocus.com/bid/28159/info BM Classifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acces...