SPIP 1.81.9 - Multiple SQL Injections

SPIP 1.81.9 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16458/info SPIP is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

aoblogger 2.3 - create.php Entry Creation

aoblogger 2.3 - create.php Entry Creation source: https://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

PHPJournaler 1.0 - 'Readold' SQL Injection

source: https://www.securityfocus.com/bid/16111/info PHPjournaler is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Community Enterprise 4.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/15963/info Community Enterprise is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a...

ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection

source: https://www.securityfocus.com/bid/15859/info ASPBB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

BTGrup Admin WebController - SQL Injection

BTGrup Admin WebController - SQL Injection source: https://www.securityfocus.com/bid/15819/info BTGrup Admin WebController is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could...

SoftBiz B2B trading Marketplace Script 1.1 - 'selloffers.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15652/info Softbiz B2B Trading Marketplace is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Instant Photo Gallery 1.0 - content.php?cid SQL Injection

Instant Photo Gallery 1.0 - content.php?cid SQL Injection source: https://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

Instant Photo Gallery 1.0 - 'portfolio.php?cat_id' SQL Injection

source: https://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Fantastic Scripts Fantastic News 2.1.1 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/15622/info Fantastic News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying...

Post Affiliate Pro 2.0.4 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15633/info Post Affiliate Pro is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of t...

Babe Logger 2.0 - 'comments.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15580/info Babe Logger is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Accelerated E Solutions - SQL Injection

source: https://www.securityfocus.com/bid/15077/info Accelerated E Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise...

Aenovo - Passworddefault.asp?Password SQL Injection

Aenovo - Passworddefault.asp?Password SQL Injection source: https://www.securityfocus.com/bid/15036/info Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...

Aenovo - '/Password/default.asp?Password' SQL Injection

source: https://www.securityfocus.com/bid/15036/info Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/usertitle.php?usertitleid' SQL Injection

source: https://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...

Dynamic Biz Website Builder (QuickWeb) 1.0 - login.asp SQL Injection

Dynamic Biz Website Builder QuickWeb 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/14083/info Dynamic Biz Website Builder QuickWeb is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or...

UBBCentral UBB.Threads 5.5.16.x - grabnext.php?posted SQL Injection

UBBCentral UBB.Threads 5.5.16.x - grabnext.php?posted SQL Injection source: https://www.securityfocus.com/bid/14052/info UBB.Threads is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successf...

DUware DUforum 3.03.1 - forums.asp?iFor SQL Injection

DUware DUforum 3.03.1 - forums.asp?iFor SQL Injection source: https://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could...

Early Impact ProductCart 2.62.7 - editCategories.asp?lid SQL Injection

Early Impact ProductCart 2.62.7 - editCategories.asp?lid SQL Injection source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it...