Facebook and the Never-Ending Privacy Discussion

As each day goes by, I see more and more people complaining when it comes to Facebook and privacy: I’d like to make my friend list private. Cannot. I’d like to have my profile visible only to my friends, not my boss. Cannot. I’d like to support an anti-abortion group without my mother or the worl...

TomatoCMS 2.0.x - SQL Injection

TomatoCMS 2.0.x - SQL Injection source: https://www.securityfocus.com/bid/40108/info TomatoCMS is prone to a SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to...

Web 2.0 Social Network Freunde Community System - 'user.php' SQL Injection

source: https://www.securityfocus.com/bid/40264/info Web 2.0 Social Network Freunde Community System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

ECShop 2.7.2 - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/40001/info ECShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

ECShop 2.7.2 - category.php SQL Injection

ECShop 2.7.2 - category.php SQL Injection source: https://www.securityfocus.com/bid/40001/info ECShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Digital Factory Publique! 2.3 - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/39988/info Publique! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

IslamSound - Multiple SQL Injections

source: https://www.securityfocus.com/bid/39880/info IslamSound is prone to multiple remote SQL injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

Billwerx RC5.2.2 PL2 - 'primary_number' SQL Injection

source: https://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

Billwerx RC5.2.2 PL2 - primary_number SQL Injection

Billwerx RC5.2.2 PL2 - primarynumber SQL Injection source: https://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

Campsite 3.x - 'article_id' SQL Injection

source: https://www.securityfocus.com/bid/39862/info Campsite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

e107 0.7.x - '/e107_admin/banner.php' SQL Injection

source: https://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or...

e107 0.7.x - e107_adminbanner.php SQL Injection

e107 0.7.x - e107adminbanner.php SQL Injection source: https://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Oracle E-Business Suite Financials 12 - 'jtfwcpnt.jsp' SQL Injection

source: https://www.securityfocus.com/bid/39510/info Oracle E-Business Suite Financials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Oracle E-Business Suite Financials 12 - jtfwcpnt.jsp SQL Injection

Oracle E-Business Suite Financials 12 - jtfwcpnt.jsp SQL Injection source: https://www.securityfocus.com/bid/39510/info Oracle E-Business Suite Financials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Centreon 'main.php' SQL Injection Vulnerability

Centreon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

HuronCMS - index.php Multiple SQL Injections

HuronCMS - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/39685/info HuronCMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attack...

HuronCMS - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/39685/info HuronCMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

4x CMS - login.php Multiple SQL Injections

4x CMS - login.php Multiple SQL Injections source: https://www.securityfocus.com/bid/39840/info 4xcms is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

tenfourzero.net Shutter 0.1.4 - admin.html Multiple SQL Injections

tenfourzero.net Shutter 0.1.4 - admin.html Multiple SQL Injections source: https://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Component com_alert - q_item SQL Injection

Joomla! Component comalert - qitem SQL Injection source: https://www.securityfocus.com/bid/38827/info The 'comalert' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...