Support Incident Tracker (SiT!) 3.63 p1 - 'report_marketing.php?exc[]' SQL Injection

source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Joomla! Component Foto - 'id_categoria' SQL Injection

source: https://www.securityfocus.com/bid/48685/info The 'Foto' component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

Google Chrome WebGL Texture Information Disclosure Vulnerability (Linux)

This host is installed with Google Chrome and is prone to information disclosure Vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromewebgltextureinfodiscvulnlin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome WebGL Texture Information Disclosure Vulnerability Linux Authors: Shashi...

Joomla Component 'com_morfeoshow' SQL Injection Vulnerability

This host is running Joomla and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlamorfeoshowsqlinjvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla Component 'commorfeoshow' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections

TEDE Simplificado 1.01S2.04 - Multiple SQL Injections source: https://www.securityfocus.com/bid/48067/info TEDE Simplificado is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

PHPortfolio 'photo.php' SQL Injection Vulnerability

PHPortfolio is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP/HPE System Management Homepage (SMH) Insight Diagnostics XSS Vulnerability (HPSBMA02615) - Active Check

HP/HPE System Management Homepage SMH with Insight Diagnostics is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Wireshark Denial of Service and Buffer Overflow Vulnerabilities (Windows)

The host is installed with Wireshark and is prone to Denial of Service and buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnwinmay11.nasl 7029 2017-08-31 11:51:40Z teissa $ Wireshark Denial of Service and Buffer Overflow Vulnerabilities Windows Authors: Madhuri ...

Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability (Windows)

The host is running Google Picasa and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasaarbitrarycodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability Windows Authors:...

Preemptive Protection against LizaMoon - Mass SQL Injection Attacks

LizaMoon is a mass SQL code injection attack, where a Web application vulnerability is exploited to inject malicious code into affected websites. If a Web surfer visits an infested site, he will be redirected to an alternate website that tries to install a rogue anti-malware software. This...

Advanced Image Hosting 2.2 SQL Injection

========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : [email protected] Data :...

Joomla! 1.6 - Multiple SQL Injections

Joomla! 1.6 - Multiple SQL Injections source: https://www.securityfocus.com/bid/46846/info Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

BoutikOne - rss_promo.php?lang SQL Injection

BoutikOne - rsspromo.php?lang SQL Injection source: https://www.securityfocus.com/bid/46861/info Pixie is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities (Windows)

The host is installed with VLC Media Player and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayerbofvulnfeb11win.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities Windows Authors: Madhuri ...

WSN Guest 1.24 - wsnuser Cookie SQL Injection

WSN Guest 1.24 - wsnuser Cookie SQL Injection source: https://www.securityfocus.com/bid/46444/info WSN Guest is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Feb 2011

This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultcodeexecvulnfeb11.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution...

Air Contacts Lite - HTTP Packet Denial of Service

Air Contacts Lite - HTTP Packet Denial of Service source: https://www.securityfocus.com/bid/46827/info Air Contacts Lite is prone a denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected application, resulting in a denial-of-service condition...

Escortservice 1.0 - 'custid' SQL Injection

source: https://www.securityfocus.com/bid/46171/info Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Moodle 'PHPCOVERAGE_HOME' Cross Site Scripting Vulnerability

Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross- site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker m...

WikLink 0.1.3 - Multiple SQL Injections

WikLink 0.1.3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/45731/info WikLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...