20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack

20 Famous websites vulnerable to Cross Site Scripting XSS Attack Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web...

S9Y Serendipity 1.5.1 - research_display.php SQL Injection

S9Y Serendipity 1.5.1 - researchdisplay.php SQL Injection source: https://www.securityfocus.com/bid/49395/info Serendipity is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection

source: https://www.securityfocus.com/bid/49209/info Code Widgets DataBound Collapsible Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

AzeoTech DAQFactory Denial of Service Vulnerability

This host is installed with AzeoTech DAQFactory and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbazeotechdaqfactorydosvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ AzeoTech DAQFactory Denial of Service Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection

source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Joomla! Component Foto - 'id_categoria' SQL Injection

source: https://www.securityfocus.com/bid/48685/info The 'Foto' component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Google Chrome WebGL Texture Information Disclosure Vulnerability (Linux)

This host is installed with Google Chrome and is prone to information disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebgltextureinfodiscvulnlin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome WebGL Texture Information Disclosure Vulnerability Linux Authors: Shashi...

Joomla Component 'com_morfeoshow' SQL Injection Vulnerability

This host is running Joomla and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlamorfeoshowsqlinjvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla Component 'commorfeoshow' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48067/info TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

HP/HPE System Management Homepage (SMH) Insight Diagnostics XSS Vulnerability (HPSBMA02615) - Active Check

HP/HPE System Management Homepage SMH with Insight Diagnostics is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PHPortfolio 'photo.php' SQL Injection Vulnerability

PHPortfolio is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark Denial of Service and Buffer Overflow Vulnerabilities (Windows)

The host is installed with Wireshark and is prone to Denial of Service and buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnwinmay11.nasl 7029 2017-08-31 11:51:40Z teissa $ Wireshark Denial of Service and Buffer Overflow Vulnerabilities Windows Authors: Madhuri ...

Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability (Windows)

The host is running Google Picasa and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasaarbitrarycodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability Windows Authors:...

Preemptive Protection against LizaMoon - Mass SQL Injection Attacks

LizaMoon is a mass SQL code injection attack, where a Web application vulnerability is exploited to inject malicious code into affected websites. If a Web surfer visits an infested site, he will be redirected to an alternate website that tries to install a rogue anti-malware software. This...

Advanced Image Hosting 2.2 SQL Injection

========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : [email protected] Data :...

Joomla! 1.6 - Multiple SQL Injections

Joomla! 1.6 - Multiple SQL Injections source: https://www.securityfocus.com/bid/46846/info Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

BoutikOne - rss_promo.php?lang SQL Injection

BoutikOne - rsspromo.php?lang SQL Injection source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities (Windows)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerbofvulnfeb11win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities Windows Authors: Madhuri ...

WSN Guest 1.24 - wsnuser Cookie SQL Injection

WSN Guest 1.24 - wsnuser Cookie SQL Injection source: https://www.securityfocus.com/bid/46444/info WSN Guest is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Feb 2011

This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultcodeexecvulnfeb11.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution...