AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities

AlmondSoft Multiple Classifieds Products - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to...

PHPLive! 3.2.2 - request.php SQL Injection

PHPLive! 3.2.2 - request.php SQL Injection source: https://www.securityfocus.com/bid/35718/info PHPLive! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Open-School 1.0 SQL Injection

Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection

source: https://www.securityfocus.com/bid/35117/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

USPS probes possible mass security breach

CBS News is reporting word about another data breach potentially compromising the personal information of thousands of people. Companies Lexis Nexis and Investigative Professionals have sent up to 40,000 letters to customers whose “sensitive and personally identifiable” information may have been...

Geeklog 1.5.2 - usersettings.php SQL Injection

Geeklog 1.5.2 - usersettings.php SQL Injection source: https://www.securityfocus.com/bid/34553/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Geeklog 1.5.2 - 'usersettings.php' SQL Injection

source: https://www.securityfocus.com/bid/34553/info Geeklog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

AdaptBB Multiple Input Validation Vulnerabilities

AdaptBB is prone to multiple security vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, an arbitrary-file-upload issue, and an arbitrary-command-execution issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some...

Absolute Form Processor XE 1.5 - login.asp SQL Injection

Absolute Form Processor XE 1.5 - login.asp SQL Injection source: https://www.securityfocus.com/bid/34463/info Absolute Form Processor XE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Xplode Multiple Vulnerabilities (Apr 2009) - Active Check

Xplode is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

4CMS - SQL Injection Local File Inclusion

4CMS - SQL Injection Local File Inclusion source: https://www.securityfocus.com/bid/34355/info 4CMS is prone to multiple SQL-injection vulnerabilities and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting the SQL-injection issues could all...

Acute Control Panel SQL Injection Vulnerability and Remote File Include Vulnerability

Acute Control Panel is prone to multiple input-validation vulnerabilities, including an SQL-injection issue and multiple remote file-include issues. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Comparison Engine Power 1.0 - product.comparision.php SQL Injection

Comparison Engine Power 1.0 - product.comparision.php SQL Injection source: https://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Comparison Engine Power 1.0 - 'product.comparision.php' SQL Injection

source: https://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

FacilCMS <= 0.1RC2 Multiple Vulnerabilities - Active Check

FacilCMS is prone to multiple SQL injection SQLi and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Xlight FTP Server 3.2 - 'user' SQL Injection

source: https://www.securityfocus.com/bid/34288/info Xlight FTP Server is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

phpCMS 2008 - search_ajax.php SQL Injection

phpCMS 2008 - searchajax.php SQL Injection source: https://www.securityfocus.com/bid/34225/info PHPCMS2008 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

phpCMS 2008 - 'search_ajax.php' SQL Injection

source: https://www.securityfocus.com/bid/34225/info PHPCMS2008 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

WEBJump! Multiple SQLi Vulnerabilities (Mar 2009) - Active Check

WEBJump! is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...