Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/21398/info Aspee Ziyaretçi Defteri is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

ASP ListPics 5.0 - Listpics.asp SQL Injection

ASP ListPics 5.0 - Listpics.asp SQL Injection source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Dragon Internet Events Listing 2.0.01 - 'event_searchdetail.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Advanced Guestbook 2.3.1 - 'admin.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20902/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...

flush.txt

ToXiC BuG FounD by Drago84Application Affect: FlushCMSSource Code:http://prdownloads.sourceforge.net/flushphp/flushcms.1.0.0.pre2.tar.gz?downloadProblem Is $classpath not DeclareSolution : Declare $classpathPage Vulnerable : class.rich.phpDir Page Vulnerable: /include/editor/ Exempe Of ExPloit...

RedBLoG 0.5 - 'common.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system...

RedBLoG 0.5 - '/admin/index.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system...

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp2.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp2.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may all...

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection

Woltlab Burning Board 1.22.02.3 - showmods.php?boardid SQL Injection source: https://www.securityfocus.com/bid/18597/info WoltLab Burning Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before...

Dating Agent 4.7.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18607/info Dating Agent is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

SoftBizScripts Dating Script 1.0 - 'products.php' SQL Injection

source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...

SaphpLesson 1.1/2.0/3.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/18501/info The saphplesson module is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the...

Cline Communications - Multiple SQL Injections

Cline Communications - Multiple SQL Injections source: https://www.securityfocus.com/bid/18491/info Cline Communications is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

MiraksGalerie 2.62 - 'galsecurity.lib.php?listconfigfile[0]' Remote File Inclusion

source: https://www.securityfocus.com/bid/18313/info MiraksGalerie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files...

VBS script in system security in eight the clever application-vulnerability warning-the black bar safety net

VBS script virus a large number of popular brings us to the VBS function with a new understanding, now everyone on the it also began to pay attention to it. VBS code in local is by the Windows Script HostWSHinterpreter execution. VBS script to perform without the WSH, the WSH is Microsoft offers ...

IBWd Guestbook 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/18256/info iBWd Guestbook is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

Abarcar Realty Portal 5.1.5 - content.php SQL Injection

Abarcar Realty Portal 5.1.5 - content.php SQL Injection source: https://www.securityfocus.com/bid/18218/info Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

phpBB Chart Mod 1.1 - charts.php?id SQL Injection

phpBB Chart Mod 1.1 - charts.php?id SQL Injection source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application t...

Creative Software UK Community Portal 1.1 - ArticleView.php?article_id SQL Injection

Creative Software UK Community Portal 1.1 - ArticleView.php?articleid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...