Bitweaver 1.x/2.0 - '/search/index.php?highlight' SQL Injection

source: https://www.securityfocus.com/bid/26801/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input including multiple cross-site scripting vulnerabilities, multiple HTML-injection vulnerabilities, and an...

E-Smart Cart 1.0 - login.asp SQL Injection

E-Smart Cart 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/25532/info E-Smart Cart is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

Real Estate Listing Website Application Template Login Dialog - SQL Injection

Real Estate Listing Website Application Template Login Dialog - SQL Injection source: https://www.securityfocus.com/bid/25115/info Real Estate Listing Website Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using ...

BSM Store Dependent Forums 1.02 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Inmostore 4.0 - index.php SQL Injection

Inmostore 4.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/24884/info Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Prototype of an PHP Application 0.1 - common.inc.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - common.inc.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - param.inc.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - param.inc.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

Prototype of an PHP Application 0.1 - '/ident/index.php?path_inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file...

DropAFew 0.2 - 'search.php?delete Action id' SQL Injection

source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

CVE-2007-1452

CVE-2007-1452 affects PHP 5.2.0 and earlier where the FDF support (ext/fdf) does not implement input filtering hooks for ext/filter. This allows remote attackers to bypass web site filters by sending a POST with application/vnd.fdf content. The description is consistently reported across multiple...

CVE-2007-1181

WebAPP before 0.9.9.5 passes 1 Unused Informations and 2 the username through Edit Profile forms, which has unknown impact and attack vectors...

SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000).

Title: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS Problem 3000. Product: Visual Studio 2005 Vendor: Microsoft Vulnerability class: Denial of Service Remote: application dependant, remote vector is possible CVE: CVE-2007-0842 Author: 3APA3A,...

Tagit! Tagit2b 2.1.B Build 2 - tagminreadconf.php?Admin Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminreadconf.php?Admin Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may all...

Tagit! Tagit2b 2.1.B Build 2 - tagminindex.php?adminpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminindex.php?adminpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/index.php?adminpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

DB Hub 0.3 - Remote Denial of Service

DB Hub 0.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploi...

Efkan Forum 1.0 - 'Grup' SQL Injection

source: https://www.securityfocus.com/bid/21726/info Efkan Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

ProNews 1.5 - 'lire-avis.php?aa' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21516/info ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. A...

Dol Storye - Dettaglio.asp Multiple SQL Injections

Dol Storye - Dettaglio.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21463/info The 'dol storye' application is prone to multiple SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issu...

People kid large redirection command in the Security aspects of the application-vulnerability warning-the black bar safety net

As we all know, DOS has a not for everyone the commonly used command-redirect command, this little thing is very useful, the command can also be used for Win9x/ME/2 0 0 0/XP, the flexible use of this command can bring us great convenience-whether invasion or defensive or is it a system app, will...