SamaGraph CMS - 'inside.aspx' SQL Injection

source: https://www.securityfocus.com/bid/39892/info SamaGraph CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

ARTIS ABTON CMS - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38658/info ARTIS ABTON CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

OpenCart 1.3.2 - 'page' SQL Injection

source: https://www.securityfocus.com/bid/38605/info OpenCart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

phpCOIN 1.2.1 - mod Local File Inclusion

phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

Mortal network shopping system V8. 0 Simplified Chinese version of Cookie spoofing exploit-vulnerability warning-the black bar safety net

adchk. asp determine the administrator login state % if Request. Cookies"venshop""adminname"="" or Request. Cookies"venshop""adminpass"="" or Request. Cookies"venshop""adminclass"="" then Response. Cookies"venshop""adminname"="" Response. Cookies"venshop""adminpass"="" Response...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...

Joomla! Component com_recipe - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38336/info The 'comrecipe' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise...

XlentProjects SphereCMS 1.1 - archive.php SQL Injection

XlentProjects SphereCMS 1.1 - archive.php SQL Injection source: https://www.securityfocus.com/bid/38309/info SphereCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

BlackBerry Spyware Can Intercept Texts, Email, Track User's Location

A security researcher demonstrated a spyware program at the ShmooCon conference on Sunday that is capable of intercepting and recording text messages, emails, Web traffic and other data sent to and from BlackBerry devices. Tyler Shields, a senior security researcher at Veracode, showed a...

ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ============================================================= Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS I...

ManageEngine OpUtils 5 - Login.DO SQL Injection

ManageEngine OpUtils 5 - Login.DO SQL Injection ================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Ashee...

XAMPP Multiple Vulnerabilities June 2009

XAMPP is prone to multiple vulnerabilities. 1. showcode.php Local File Include Vulnerability An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. 2. Multiple Cross Site Scripting Vulnerabilitie...

Site Manager 3.0 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/39973/info Site Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Site Manager 3.0 - id SQL Injection

Site Manager 3.0 - id SQL Injection source: https://www.securityfocus.com/bid/39973/info Site Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

OpenX 2.6.1 - SQL Injection

OpenX 2.6.1 - SQL Injection source: https://www.securityfocus.com/bid/37913/info OpenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHPMySpace Gold 8.0 - 'gid' SQL Injection

source: https://www.securityfocus.com/bid/37881/info PHPMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

AdvertisementManager 3.1 - req LocalRemote File Inclusion

AdvertisementManager 3.1 - req LocalRemote File Inclusion source: https://www.securityfocus.com/bid/44165/info AdvertisementManager is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...

VisionGate 1.6 Cross Site Scripting

======================================================================================== | Title : VisionGate 1.6 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found :...

eStore 1.0.2 SQL Injection

===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x Web : www.sux0r.net x Download:...

iDevAffiliate 4.0 Cross Site Scripting

======================================================================================== | Title : iDevAffiliate v4.0 XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site : www.iq-ty.com | ...