Galette - picture.php SQL Injection

Galette - picture.php SQL Injection source: https://www.securityfocus.com/bid/53463/info Galette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

BBSXP CMS - Multiple SQL Injections

BBSXP CMS - Multiple SQL Injections source: https://www.securityfocus.com/bid/53298/info BBSXP CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

osCMax 2.5 - adminstats_customers.php?sorted Cross-Site Scripting

osCMax 2.5 - adminstatscustomers.php?sorted Cross-Site Scripting source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiti...

IBM DB2 Distributed Relational Database Architecture Request DoS Vulnerability

The host is running IBM DB2 and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2drdareqdosvuln.nasl 6018 2017-04-24 09:02:24Z teissa $ IBM DB2 Distributed Relational Database Architecture Request DoS Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

RealNetworks RealPlayer RV30 Sample Arbitrary Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Real Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

Polycom Products Directory Traversal and Command Injection Vulnerabilities

Multiple Polycom products are prone to a directory-traversal vulnerability and a command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory- traversal sequences '../' to retrieve arbitrary file...

Call for Paper - DEF CON Rajasthan March 2012 Meet

Call for Paper - DEF CON Rajasthan March 2012 Meet DEF CON Rajasthan - March 2012 Jaipur Meet, Call For Papers is now officially Open and will close on March 10, 2012. DEF CON Rajasthan DC91141 is a DEF CON Registered group of people interested in exploring technology and it implications in...

Security feature bypass

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

Marinet CMS - gallery.php?id SQL Injection

Marinet CMS - gallery.php?id SQL Injection source: https://www.securityfocus.com/bid/51336/info Marinet CMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability

This host is running VertrigoServ and is prone to cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbvertrigoservextparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ VertrigoServ 'ext' Parameter Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2012...

Pligg CMS 1.1.2 - status SQL Injection

Pligg CMS 1.1.2 - status SQL Injection source: https://www.securityfocus.com/bid/51273/info Pligg CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability

This host is running phpBB MyPage plugin and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbbmypagepluginsqlinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBB MyPage Plugin 'id' Parameter SQL Injection Vulnerability Authors: Rachana Shetty Copyright: Copyrig...

osCSS2 '_ID' parameter Directory Traversal Vulnerability

This host is running osCSS2 and is to prone directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodoscssidparamdirtravvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ osCSS2 'ID' parameter Directory Traversal Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Digital Attic Foundation CMS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

PreProjects Pre Studio Business Cards Designer 'page.php' SQL Injection Vulnerability

Pre Studio Business Cards Designer is prone to an SQL-injection vulnerability because the application fails to properly sanitize user- supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit...

APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability

The host is running APC PowerChute Network Shutdown and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodapcpcnsappletxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ APC PowerChute Network Shutdown 'security/applet' Cross Site Scripting Vulnerability Authors:...

dotProject 'index.php' SQL Injection Vulnerability

The host is running dotProject and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject 'index.php' SQL Injection Vulnerability. Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Card sharj 1.0 - Multiple SQL Injections

Card sharj 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be...

MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability

This host is running MyAuth3 Gateway and is prone SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbmyauth3gatewayblindsqlinjvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbo...