Jara 1.6 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities

Jara 1.6 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55145/info Jara is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

Banana Dance - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/55153/info Banana Dance is prone to cross-site-scripting and SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an...

OrderSys 1.6.4 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities

OrderSys 1.6.4 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55147/info OrderSys is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

1024 CMS 2.1.1 - 'p' SQL Injection

source: https://www.securityfocus.com/bid/55170/info 1024 CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Own the Email, Own the Person

For attackers looking to take control of a victim’s online presence, there is no better place to start than the target’s email account. If you own the email, you own the person. That’s never been more true than today, with so many social networks, services and shopping sites attached to users’...

AraDown - id SQL Injection

AraDown - id SQL Injection source: https://www.securityfocus.com/bid/54891/info AraDown is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application...

phpList 2.10.18 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/54912/info PHPList is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

TCExam 11.2.x - admincodetce_edit_question.php?subject_module_id SQL Injection

TCExam 11.2.x - admincodetceeditquestion.php?subjectmoduleid SQL Injection source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

WordPress Theme ShopperPress - SQL Injection Cross-Site Scripting

WordPress Theme ShopperPress - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/55062/info The ShopperPress WordPress theme is prone to an SQL-injection and multiple cross-site vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploi...

tekno.Portal 0.1b - link.php SQL Injection

tekno.Portal 0.1b - link.php SQL Injection source: https://www.securityfocus.com/bid/54786/info tekno.Portal is prone to an SQL-injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

ManageEngine Applications Manager - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54759/info ManageEngine Applications Manager is prone to multiple SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the...

Limny - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/54753/info Limny is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

phpBB - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54734/info phpBB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Elite Bulletin Board - Multiple SQL Injections

Elite Bulletin Board - Multiple SQL Injections source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Elite Bulletin Board - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Classified Ads Script PHP - admin.php Multiple SQL Injections

Classified Ads Script PHP - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54299/info Classified Ads Script PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Cotonti - admin.php SQL Injection

Cotonti - admin.php SQL Injection source: https://www.securityfocus.com/bid/54147/info Cotonti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromis...

Funeral Script PHP - Cross-Site Scripting SQL Injection

Funeral Script PHP - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/54402/info Funeral Script PHP is prone to multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied...

Code injection

The Single Sign On Client ubuntu-sso-client for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle MITM attack...

Simple Forum PHP - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54024/info Simple Forum PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...