MODx 1.0.3 - index.php Multiple SQL Injections

MODx 1.0.3 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker...

MODx 1.0.3 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/40841/info MODx is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

AneCMS 1.x - modulesblogindex.php SQL Injection

AneCMS 1.x - modulesblogindex.php SQL Injection source: https://www.securityfocus.com/bid/40840/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

(GREEZLE) Global Real Estate Agent Login - Multiple SQL Injections

GREEZLE Global Real Estate Agent Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/40676/info GREEZLE - Global Real Estate Agent Site is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

SQL injection vulnerability in Ecomat CMS

Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

ImpressPages CMS 1.0x - admin.php Multiple SQL Injections

ImpressPages CMS 1.0x - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/40431/info ImpressPages CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

360 Web Manager 3.0 - 'webpages-form-led-edit.php' SQL Injection

source: https://www.securityfocus.com/bid/40378/info 360 Web Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

cyberhost - default.asp SQL Injection

cyberhost - default.asp SQL Injection source: https://www.securityfocus.com/bid/40357/info cyberhost is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

XSS vulnerability in NPDS REvolution

Vulnerability ID: HTB22365 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 01 May 2010 Vulnerability Type: XSS Cross Site Scripting Status:...

Platnik 8.1.1 - Multiple SQL Injections

Platnik 8.1.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/40201/info Platnik is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Platnik 8.1.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/40201/info Platnik is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Facebook and the Never-Ending Privacy Discussion

As each day goes by, I see more and more people complaining when it comes to Facebook and privacy: I’d like to make my friend list private. Cannot. I’d like to have my profile visible only to my friends, not my boss. Cannot. I’d like to support an anti-abortion group without my mother or the worl...

TomatoCMS 2.0.x - SQL Injection

TomatoCMS 2.0.x - SQL Injection source: https://www.securityfocus.com/bid/40108/info TomatoCMS is prone to a SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to...

Web 2.0 Social Network Freunde Community System - 'user.php' SQL Injection

source: https://www.securityfocus.com/bid/40264/info Web 2.0 Social Network Freunde Community System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

ECShop 2.7.2 - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/40001/info ECShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

ECShop 2.7.2 - category.php SQL Injection

ECShop 2.7.2 - category.php SQL Injection source: https://www.securityfocus.com/bid/40001/info ECShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Digital Factory Publique! 2.3 - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/39988/info Publique! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

IslamSound - Multiple SQL Injections

source: https://www.securityfocus.com/bid/39880/info IslamSound is prone to multiple remote SQL injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

Billwerx RC5.2.2 PL2 - primary_number SQL Injection

Billwerx RC5.2.2 PL2 - primarynumber SQL Injection source: https://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

Billwerx RC5.2.2 PL2 - 'primary_number' SQL Injection

source: https://www.securityfocus.com/bid/39867/info Billwerx is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...