UApplication Ublog Reload 1.0.5 - Trackback.asp Cross-Site Scripting

UApplication Ublog Reload 1.0.5 - Trackback.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/13994/info Ublog Reload is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Microsoft Exchange Server Outlook Web Access HTML Injection Vulnerability

Description Outlook Web Access is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the affected application of an unsuspecting user in...

WebHints hints.pl Arbitrary Command Execution

The remote host is running the WebHints scripts. This version of WebHints has a remote command execution vulnerability in hints.pl. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Early Impact ProductCart 2.6/2.7 - 'viewPrd.asp?idcategory' SQL Injection

source: https://www.securityfocus.com/bid/13881/info ProductCart is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise o...

MWChat 6.7 - Start_Lobby.php Remote File Inclusion

MWChat 6.7 - StartLobby.php Remote File Inclusion source: https://www.securityfocus.com/bid/13849/info MWChat is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

BookReview 1.0 - add_booklist.htm?node Cross-Site Scripting

BookReview 1.0 - addbooklist.htm?node Cross-Site Scripting source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

FunkyASP AD Systems 1.1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13761/info FunkyASP AD Systems is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

WowBB 1.6 - View_User.php SQL Injection

WowBB 1.6 - ViewUser.php SQL Injection source: https://www.securityfocus.com/bid/13569/info WowBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query. Successful exploitation could...

ASP Inline Corporate Calendar 3.6.3 - 'Defer.asp' SQL Injection

source: https://www.securityfocus.com/bid/13485/info ASP Inline Corporate Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

WebCrossing WebX 5.0 - Cross-Site Scripting

WebCrossing WebX 5.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13482/info WebCrossing is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CartWIZ 1.10 - 'ProductCatalogSubCats.asp' SQL Injection

source: https://www.securityfocus.com/bid/13331/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a compromise of...

DUportal Pro 3.4 - default.asp Multiple SQL Injections

DUportal Pro 3.4 - default.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

DUportal 3.1.2 - channel.asp?iChannel SQL Injection

DUportal 3.1.2 - channel.asp?iChannel SQL Injection source: https://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL...

phpBB-Auction Module 1.01.2 - Auction_Rating.php SQL Injection

phpBB-Auction Module 1.01.2 - AuctionRating.php SQL Injection source: https://www.securityfocus.com/bid/13283/info phpbb-auction module is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

APT-webshop 3.0/4.0 - 'modules.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17425/info APT-webshop is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Einstein 1.01 - Local Password Disclosure

Einstein 1.01 - Local Password Disclosure / Einstein v1.01 Local Password Disclosure Exploit by Kozan Application: Einstein v1.01 and previous versions Procuder: Bfriendly.com Vulnerable Description: Einstein v1.01 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA...

iGeneric iG Shop 1.x - Multiple SQL Injections

iGeneric iG Shop 1.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/12627/info iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL...

Software602 602 Lan Suite 2004 2004.0.04.1221 - Arbitrary File Upload

Software602 602 Lan Suite 2004 2004.0.04.1221 - Arbitrary File Upload source: https://www.securityfocus.com/bid/12495/info 602 Lan Suite 2004 is reportedly affected by a vulnerability regarding the uploading of file attachments. This issue is due to the application failing to properly sanitize th...

PerlDesk kb.cgi view Parameter SQL Injection

The remote host is running PerlDesk, a web-based helpdesk application written in Perl. The remote version of this software has several SQL injection vulnerabilities, that could allow an attacker to execute arbitrary SQL statements on the remote database. %NASLMINLEVEL 70300 C Tenable Network...