Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection

Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/42247/info Hulihan Applications BXR is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An...

Hulihan Applications BXR 0.6.8 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42247/info Hulihan Applications BXR is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application,...

Cetera eCommerce - Multiple SQL Injections

source: https://www.securityfocus.com/bid/42058/info Cetera eCommerce is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues can allow an attacker to compromise the application, acces...

Cetera eCommerce - Multiple SQL Injections

Cetera eCommerce - Multiple SQL Injections source: https://www.securityfocus.com/bid/42058/info Cetera eCommerce is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues can allow an...

MC Content Manager 10.1 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41949/info MC Content Manager is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

CMSQLite Cross Site Scripting / SQL Injection

================================================= Vulnerability ID: HTB22464 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsqlite.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type:...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

Mahara Multiple Vulnerabilities (Jul 2010)

Mahara is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if description...

CANDID - imageview.php?image_id SQL Injection

CANDID - imageview.php?imageid SQL Injection source: https://www.securityfocus.com/bid/41216/info CANDID is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...

BlaherTech Placeto CMS - Username SQL Injection

BlaherTech Placeto CMS - Username SQL Injection source: https://www.securityfocus.com/bid/41190/info BlaherTech Placeto CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Customer Paradigm PageDirector - 'id' SQL Injection

source: https://www.securityfocus.com/bid/41184/info Customer Paradigm PageDirector is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

eBay Clone Script 2010 - 'showcategory.php' SQL Injection

source: https://www.securityfocus.com/bid/41200/info eBay Clone Script 2010 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access ...

Lois Software 2.0a SQL Injection

Vulnerability ID: HTB22430 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinwebdb1.html Product: WebDB Vendor: Lois Software Vulnerable Version: 2.0a and Probably Prior Versions Vendor Notification: 10 June 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk...

AbleSpace 1.0 - news.php SQL Injection

AbleSpace 1.0 - news.php SQL Injection source: https://www.securityfocus.com/bid/41139/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Lois Software WebDB 2.0A Script - Multiple SQL Injections

Lois Software WebDB 2.0A Script - Multiple SQL Injections source: https://www.securityfocus.com/bid/41124/info Lois Software WebDB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issu...

OneCMS 2.6.1 - 'short1' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how t...

OneCMS 2.6.1 - cat Cross-Site Scripting

OneCMS 2.6.1 - cat Cross-Site Scripting source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

OneCMS 2.6.1 - search SQL Injection

OneCMS 2.6.1 - search SQL Injection source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

SaffaTunes CMS - news.php Multiple SQL Injections

SaffaTunes CMS - news.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40995/info SaffaTunes CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...

MS Launches Centralized Fraud Alert System

Microsoft launched a new Web-based mechanism for researchers to securely report stolen credentials, bank and credit card data, or other data they discover, and as a way to quickly alert the appropriate banks, retailers, or government agencies of a compromise. Read the full article. Dark Reading...