Vegas Forum 1.0 - 'Forumlib.php' SQL Injection

source: https://www.securityfocus.com/bid/17079/info Vegas Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Fantastic News 2.1.1 - SQL Injection

Fantastic News 2.1.1 - SQL Injection source: https://www.securityfocus.com/bid/16842/info Fantastic News is prone to an SQL-injection vulnerability. Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying...

PHP-Nuke 7.8 - Mainfile.php SQL Injection

PHP-Nuke 7.8 - Mainfile.php SQL Injection source: https://www.securityfocus.com/bid/16831/info PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Magic Calendar Lite 1.02 - index.php SQL Injection

Magic Calendar Lite 1.02 - index.php SQL Injection source: https://www.securityfocus.com/bid/16734/info Magic Calendar Lite is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Lawrence Osiris DB_eSession 1.0.2 - Class SQL Injection

source: https://www.securityfocus.com/bid/16598/info DBeSession is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the application, access or modi...

Daffodil CRM 1.5 - 'Userlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/16433/info Daffodil CRM is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise t...

Bit 5 Blog 8.1 - index.php SQL Injection

Bit 5 Blog 8.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Bit 5 Blog 8.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure

Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure source: https://www.securityfocus.com/bid/16195/info Hummingbird Enterprise Collaboration is prone to multiple vulnerabilities. The following specific issues were identified: The application reportedly allows...

Primo Place Primo Cart 1.0 - Multiple SQL Injections

Primo Place Primo Cart 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16125/info Primo Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Primo Place Primo Cart 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16125/info Primo Cart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

PT-2005-5450 · Turnkey Web Tools · Sunshop Shopping Cart

Name of the Vulnerable Software and Affected Versions: Turnkey Web Tools SunShop Shopping Cart affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via a phpinfo action to specific API endpoints: "index.php", "admin/index.php", and...

Enterprise Connector 1.0.2 - main.php SQL Injection

Enterprise Connector 1.0.2 - main.php SQL Injection source: https://www.securityfocus.com/bid/15984/info Enterprise Connector is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

ZixForum 1.12 - 'forum.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16406/info ZixForum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

Jamit Job Board 2.4.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15848/info Job Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Snipe Gallery 3.1.4 - 'view.php?gallery_id' SQL Injection

source: https://www.securityfocus.com/bid/15844/info Snipe Gallery is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to...

Cars Portal 1.1 - index.php Multiple SQL Injections

Cars Portal 1.1 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15747/info Cars Portal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Relative Real Estate Systems 1.2 - SQL Injection

source: https://www.securityfocus.com/bid/15714/info Relative Real Estate Systems is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL query. This vulnerability...

WebCalendar 1.0.1 - Multiple SQL Injections

WebCalendar 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic o...

WSN Knowledge Base 1.2 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15656/info WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...