WordPress Plugin 1 Flash Gallery 0.2.5 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/46783/info 1 Flash Gallery is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify...

Forritun - Multiple SQL Injections

Forritun - Multiple SQL Injections source: https://www.securityfocus.com/bid/46629/info Forritun is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Android Targeted by Two New Spyware Programs

Two new spyware programs, SW.SecurePhone and SW.Quieting, are targeting users of Android devices, mainly in the U.S., and could lead to serious data compromises, according to new research from NetQin Mobile. These programs are collecting all of the data saved on the phone’s SD card. This data...

glFusion 1.1.x1.2.1 - users.php SQL Injection

glFusion 1.1.x1.2.1 - users.php SQL Injection source: https://www.securityfocus.com/bid/46575/info glFusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Course MS <= 2.1 Multiple Vulnerabilities - Active Check

Course Registration Management System is prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Canadian Prime Minister Stephen Harper promises action on cyber attacks !

OTTAWA Federal security agencies are working to deal with cyber threats, Prime Minister Stephen Harper said Thursday. He wouldn't speak directly to what the government calls an "unauthorized attempt" to access computer networks at the Treasury Board. The attack left civil servants in key...

Lush takes down two regional sites following another hack !

Last month's compromise of the UK website of the natural ingredients cosmetic firm Lush and the theft of its customers' credit card details must have hurt the company but unfortunately, its troubles are not over yet. "We are sorry to have to announce that the Lush Australian and New Zealand...

Rae Media Real Estate Single Agent - SQL Injection

source: https://www.securityfocus.com/bid/45211/info Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Rae Media Real Estate Single Agent - SQL Injection

Rae Media Real Estate Single Agent - SQL Injection source: https://www.securityfocus.com/bid/45211/info Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

HTB22825: SQL Injection in Seo Panel

Vulnerability ID: HTB22825 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel2.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit:...

RunCMS 2.2.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2.2 Vendor Notificatio...

RunCMS 2.2.2 - 'register.php' SQL Injection

source: https://www.securityfocus.com/bid/46342/info RunCMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...

Escortservice 1.0 - custid SQL Injection

Escortservice 1.0 - custid SQL Injection source: https://www.securityfocus.com/bid/46171/info Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attack...

Escortservice 'custid' Parameter SQL Injection Vulnerability

Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the...

Escortservice <= 1.0 SQLi Vulnerability

Escortservice is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Escortservice 1.0 - 'custid' SQL Injection

source: https://www.securityfocus.com/bid/46171/info Escortservice is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Joomla! Component com_clan_members - id SQL Injection

Joomla! Component comclanmembers - id SQL Injection source: https://www.securityfocus.com/bid/46080/info The 'comclanmembers' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

mediawiki -- multiple vulnerabilities

Medawiki reports: An arbitrary script inclusion vulnerability was discovered. The vulnerability only allows execution of files with names ending in ".php" which are already present in the local filesystem. Only servers running Microsoft Windows and possibly Novell Netware are affected. Despite...

All In One Control Panel 1.4.1 - cp_menu_data_file.php SQL Injection

All In One Control Panel 1.4.1 - cpmenudatafile.php SQL Injection source: https://www.securityfocus.com/bid/46097/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. ...

PHPAuctions 'viewfaqs.php' SQLi Vulnerability - Active Check

PHPAuctions is prone to an SQL injection SQLi vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...