pfile <= 1.02 Multiple Vulnerabilities - Active Check

pfile is prone to a cross-site scripting XSS vulnerability and an SQL injection SQLi vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

TestLink - Multiple SQL Injections

TestLink - Multiple SQL Injections source: https://www.securityfocus.com/bid/52086/info TestLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...

TestLink - Multiple SQL Injections

source: https://www.securityfocus.com/bid/52086/info TestLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

CMS Faethon 1.3.4 - articles.php Multiple SQL Injections

CMS Faethon 1.3.4 - articles.php Multiple SQL Injections source: https://www.securityfocus.com/bid/52053/info CMS Faethon is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

LEPTON 1.1.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/52026/info LEPTON is prone to multiple input-validation vulnerabilities, including: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A local file-include vulnerability 4. Multiple HTML-injection vulnerabilities Exploiting these...

STHS v2 Web Portal - 'prospect.php?team' SQL Injection

source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

eFront Community++ 3.6.10 - SQL Injection / Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51973/info eFront Community++ is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to compromise the...

BASE 'base_qry_main.php' SQL Injection Vulnerability

BASE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Zenphoto Multiple Security Vulnerabilities

Zenphoto is prone to multiple cross-site scripting vulnerabilities, an SQL-injection vulnerability, and a PHP code-injection vulnerability. An attacker can exploit the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...

PHP-Fusion 7.2.4 - 'weblink_id' SQL Injection

source: https://www.securityfocus.com/bid/51865/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

4Images 1.7.10 - '/admin/index.php?redirect' Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/51774/info 4images is prone to multiple input-validation vulnerabilities including: 1. A cross-site scripting vulnerability. 2. An open-redirection vulnerability. 3. An SQL-injection vulnerability. An attacker may leverage these issues to perform spoofing...

Joomla! Component com_propertylab - id SQL Injection

Joomla! Component compropertylab - id SQL Injection source: https://www.securityfocus.com/bid/51729/info The 'compropertylab' component for Joomla! is prone to a remote SQL injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

Joomla! Component com_products - Multiple SQL Injections

source: https://www.securityfocus.com/bid/51674/info The 'comproducts' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromi...

OSClass 2.3.3 - index.php?getParam() Multiple Cross-Site Scripting Vulnerabilities

OSClass 2.3.3 - index.php?getParam Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51662/info OSClass is prone to SQL-injection and cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

OSClass 2.3.3 - 'index.php?sCategory' SQL Injection

source: https://www.securityfocus.com/bid/51662/info OSClass is prone to SQL-injection and cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit...

Ultimate Locator - 'radius' SQL Injection

source: https://www.securityfocus.com/bid/51653/info Ultimate Locator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

SolarWinds Orion Data Storage Manager SQLi and XSS Vulnerabilities

SolarWinds Orion Data Storage Manager is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Joomla! Component Full - id SQL Injection

Joomla! Component Full - id SQL Injection source: https://www.securityfocus.com/bid/51616/info The Full 'comfull' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Component Vik Real Estate 1.0 - Multiple SQL Injections

Joomla! Component Vik Real Estate 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/51617/info The 'comsanpham' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

MMORPG Zone - view_news.php SQL Injection

MMORPG Zone - viewnews.php SQL Injection source: https://www.securityfocus.com/bid/51532/info MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...