Support Incident Tracker (SiT!) Multiple Input Validation Vulnerabilities

Support Incident Tracker SiT! is prone to the following input- validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. Multiple SQL-injection vulnerabilities 3. Multiple cross-site request-forgery vulnerabilities Exploiting these issues could allow an attacker to execute...

WordPress Plugin Auctions 1.8.8 - 'wpa_id' SQL Injection

source: https://www.securityfocus.com/bid/49625/info Auctions plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting SQL Injections

GeoClassifieds Lite 2.0.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/49475/info GeoClassifieds Lite is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

EasyGallery 5 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/49458/info EasyGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...

EasyGallery 5 - index.php Multiple SQL Injections

EasyGallery 5 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/49458/info EasyGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow a...

Mambo Component N-Frettir - SQL Injection

Mambo Component N-Frettir - SQL Injection source: https://www.securityfocus.com/bid/49422/info The Mambo CMS N-Frettir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

Mambo Component Ahsshop - SQL Injection

source: https://www.securityfocus.com/bid/49419/info The Mambo CMS AHS Shop component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Mambo Component N-Press - SQL Injection

Mambo Component N-Press - SQL Injection source: https://www.securityfocus.com/bid/49420/info The Mambo CMS N-Press component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

WordPress Donation Plugin <= 1.0 - SQL Injection

Donation plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

Serendipity 'research_display.php' SQLi Vulnerability (Sep 2011) - Active Check

Serendipity is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity"; if...

S9Y Serendipity 1.5.1 - research_display.php SQL Injection

S9Y Serendipity 1.5.1 - researchdisplay.php SQL Injection source: https://www.securityfocus.com/bid/49395/info Serendipity is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection

TinyWebGallery 1.8.4 - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/49393/info TinyWebGallery is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, explo...

Web Professional - default.php SQL Injection

Web Professional - default.php SQL Injection source: https://www.securityfocus.com/bid/49399/info Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

CS-Cart 2.2.1 - 'products.php' SQL Injection

source: https://www.securityfocus.com/bid/49378/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

phpWebSite 1.7.1 - 'mod.php' SQL Injection

source: https://www.securityfocus.com/bid/49354/info phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data,...

VicBlog - tag SQL Injection

VicBlog - tag SQL Injection source: https://www.securityfocus.com/bid/49304/info VicBlog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

VicBlog - 'tag' SQL Injection

source: https://www.securityfocus.com/bid/49304/info VicBlog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modif...

TotalShopUK 1.7.2 - index.php SQL Injection

TotalShopUK 1.7.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/49263/info TotalShopUK is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacke...

BlueSoft Banner Exchange - 'referer_id' SQL Injection

source: https://www.securityfocus.com/bid/49091/info BlueSoft Banner Exchange is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...

Securing Mobile Devices May Be an Impossible Task

LAS VEGAS–The way that things are right now in mobile security, there does not look to be much hope for keeping corporate and personal data secure. A panel of researchers who focus on looking for attacks and bugs at various levels of the mobile device and infrastructure said at Black Hat that the...