osCMax 2.5 - '/admin/login.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/52886/info osCMax is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

vBulletin 4.1.10 - 'announcementid' SQL Injection

source: https://www.securityfocus.com/bid/52897/info VBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, ...

Landshop 0.9.2 - Multiple Web Vulnerabilities

Landshop 0.9.2 - Multiple Web Vulnerabilities Title: ====== Landshop v0.9.2 - Multiple Web Vulnerabilities Date: ===== 2012-03-31 References: =========== http://vulnerability-lab.com/getcontent.php?id=485 VL-ID: ===== 485 Introduction: ============= The SAMEDIA LandShop� is an innovative tool for...

Global Payments Inc. Acknowledges Breach

Following previous announcements from Visa and Mastercard, electronic credit card processor Global Payments Inc. acknowledged late Friday that its system was breached earlier this year. Global Payments announced via press release that a portion of its processing system had been compromised in ear...

e107 1.0 - 'view' SQL Injection

source: https://www.securityfocus.com/bid/52821/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

PHP Designer 2007 Personal - Multiple SQL Injections

PHP Designer 2007 Personal - Multiple SQL Injections source: https://www.securityfocus.com/bid/52819/info PHP Designer 2007 - Personal is prone multiple SQL-injection vulnerabilities. A successful exploit will allow an attacker to compromise the application, access or modify data, or exploit late...

Geeklog 1.8.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/52725/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

F5 FirePass 7.0 - SQL Injection

source: https://www.securityfocus.com/bid/52653/info FirePass is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, o...

Wikidforum 2.10 - Advanced Search Multiple Field SQL Injections

source: https://www.securityfocus.com/bid/52425/info Wikidforum is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

Exponent CMS 2.0 - 'src' SQL Injection

source: https://www.securityfocus.com/bid/52328/info Exponent CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Exponent CMS 2.0 - src SQL Injection

Exponent CMS 2.0 - src SQL Injection source: https://www.securityfocus.com/bid/52328/info Exponent CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

Joomla! 2.5.1 - 'redirect.php' Blind SQL Injection

source: https://www.securityfocus.com/bid/52312/info Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

LastGuru ASP Guestbook - View.asp SQL Injection

LastGuru ASP Guestbook - View.asp SQL Injection source: https://www.securityfocus.com/bid/52293/info LastGuru ASP GuestBook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

The Security Game Needs to Change

SAN FRANCISCO–You don’t need to look too hard or talk to too many people at the RSA Conference here this week to realize that there is one subtle but persistent signal amid all of the noise: security is failing.It’s not news that things are broken. They’ve been broken for a while now, and not jus...

pfile <= 1.02 Multiple Vulnerabilities - Active Check

pfile is prone to a cross-site scripting XSS vulnerability and an SQL injection SQLi vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

TestLink - Multiple SQL Injections

TestLink - Multiple SQL Injections source: https://www.securityfocus.com/bid/52086/info TestLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker ...

TestLink - Multiple SQL Injections

source: https://www.securityfocus.com/bid/52086/info TestLink is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

CMS Faethon 1.3.4 - articles.php Multiple SQL Injections

CMS Faethon 1.3.4 - articles.php Multiple SQL Injections source: https://www.securityfocus.com/bid/52053/info CMS Faethon is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

LEPTON 1.1.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/52026/info LEPTON is prone to multiple input-validation vulnerabilities, including: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A local file-include vulnerability 4. Multiple HTML-injection vulnerabilities Exploiting these...

STHS v2 Web Portal - 'prospect.php?team' SQL Injection

source: https://www.securityfocus.com/bid/51991/info STHS v2 Web Portal is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...