CreateVision CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/52648/info CreateVision CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

LeKommerce - id SQL Injection

LeKommerce - id SQL Injection source: https://www.securityfocus.com/bid/52347/info LeKommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Open Realty 2.5.x - select_users_template Local File Inclusion

Open Realty 2.5.x - selectuserstemplate Local File Inclusion source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

Open Realty 2.5.x - 'select_users_template' Local File Inclusion

source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

LastGuru ASP Guestbook - 'View.asp' SQL Injection

source: https://www.securityfocus.com/bid/52293/info LastGuru ASP GuestBook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Collaborative Passwords Manager (cPassMan) Remote Command Execution

cPassMan is prone to a remote command execution vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MyJobList 0.1.3 - eid SQL Injection

MyJobList 0.1.3 - eid SQL Injection source: https://www.securityfocus.com/bid/52168/info MyJobList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

Joomla! Component Machine - Multiple SQL Injections

Joomla! Component Machine - Multiple SQL Injections source: https://www.securityfocus.com/bid/52095/info The Machine component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! Component Machine - Multiple SQL Injections

source: https://www.securityfocus.com/bid/52095/info The Machine component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Joomla! Component com_xvs - Controller Local File Inclusion

Joomla! Component comxvs - Controller Local File Inclusion source: https://www.securityfocus.com/bid/52091/info The 'comxvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability t...

Joomla! Component com_xcomp - Local File Inclusion

Joomla! Component comxcomp - Local File Inclusion source: https://www.securityfocus.com/bid/52078/info The Xcomp component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

Joomla! Component com_x-shop - idd SQL Injection

Joomla! Component comx-shop - idd SQL Injection source: https://www.securityfocus.com/bid/52077/info The X-Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Horde Groupware Source Packages Backdoor Vulnerability - Active Check

Horde Groupware is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware";...

swDesk Multiple Input Validation Vulnerabilities

swDesk is prone to the following vulnerabilities: 1. An arbitrary file-upload vulnerability. 2. Multiple cross-site scripting vulnerabilities. 3. Multiple PHP code-injection vulnerabilities. An attacker can exploit these issues to execute arbitrary script code in the context of the affected site,...

Microsoft Internet Explorer Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability because of a use-after-free error in the 'Mshtml.dll' library. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromi...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_ag_main.php Crafted Arbitrary File Upload Arbitrary Code Execution

Basic Analysis and Security Engine BASE 1.4.5 - baseagmain.php Crafted Arbitrary File Upload Arbitrary Code Execution source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit the...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_graph_common.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basegraphcommon.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_output_query.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbaseoutputquery.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issu...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_alerts.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatalerts.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - setupbase_conf_contents.php Multiple Remote File Inclusions

Basic Analysis and Security Engine BASE 1.4.5 - setupbaseconfcontents.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to...