Joomla Payage component 'aid' parameter SQL injection vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the 'aid' parameter of the Joomla Payage component, which allows an attacker to exploit the vulnerability to gain access to sensitive database information...

Joomla com_fidecalendar plugin 'aid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'aid' parameter of the Joomla comfidecalendar plugin. An attacker can exploit the vulnerability to access or modify database data...

WordPress PICA Photo Gallery Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. A SQL injection vulnerability exists in the parameter aid i...

Girl First Aid Flu Ambulance - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Girl First Aid Flu Ambulance published at the 'play' market has multiple vulnerabilities...

Baby and Child First Aid - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Baby and Child First Aid published at the 'play' market has multiple vulnerabilities...

Hearing Aid with Replay (Lite) - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hearing Aid with Replay Lite published at the 'play' market has multiple vulnerabilities...

Poisoning - First Aid Lite - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Poisoning - First Aid Lite published at the 'play' market has multiple vulnerabilities...

Ear Assist: Hearing Aid App - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Ear Assist: Hearing Aid App published at the 'play' market has multiple vulnerabilities...

Petralex Hearing aid - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Petralex Hearing aid published at the 'play' market has multiple vulnerabilities...

Researchers, FBI Warn of Nepal Earthquake Scams

The earthquake that hit Nepal late last month has caused untold damage in the region and kicked off a massive relief and aid effort. Attackers are loathe to let a chance like that go by, and they have concocted a number of schemes to deprive victims of their money and hope for relief funds. Aid...

Digital First Aid Kit Guide For Activists, First-Responders

A coalition of worldwide non-governmental organizations has compiled a guide for individuals at risk for cyberattacks as well as for anyone charged with helping activists, human rights organizations and journalists identify and respond to threats. The Digital First Aid Kit is available on Github...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

CVE-2014-4598

Cross-site scripting XSS vulnerability in wp-tmkm-amazon-search.php in the wp-tmkm-amazon plugin 1.5b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the AID parameter...

PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

CVE-2012-1648

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors...

CVE-2012-1648

The CVE-2012-1648 issue affects the Drupal Cool aid module (6.x-1.x) prior to 6.x-1.9. The root cause is improper user input sanitization combined with insufficient access checks, allowing remote authenticated users with the administer coolaid permission to inject arbitrary script/HTML via unspec...

CVE-2012-1649

CVE-2012-1649 affects the Drupal Cool Aid module prior to 6.x-1.9. The vulnerability is an access-control bypass that allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. The root cause is insufficient access restriction enfor...