Comersus Cart 7.0.7 - 'comersus_message.asp' redirectUrl Cross-Site Scripting

source: https://www.securityfocus.com/bid/24562/info Comersus Cart is affected by multiple input validation vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. The attacker may...

FuseTalk 2.03.0 - AuthError.cfm SQL Injection

FuseTalk 2.03.0 - AuthError.cfm SQL Injection source: https://www.securityfocus.com/bid/24528/info FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attack...

FuseTalk 2.0/3.0 - 'AuthError.cfm' SQL Injection

source: https://www.securityfocus.com/bid/24528/info FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Prototype of an PHP Application 0.1 - gestionindex.php?path_inc Remote File Inclusion

Prototype of an PHP Application 0.1 - gestionindex.php?pathinc Remote File Inclusion source: https://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the...

DGNews 1.5.12.1 - news.php SQL Injection

DGNews 1.5.12.1 - news.php SQL Injection source: https://www.securityfocus.com/bid/24201/info DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploits could allow an attacker to...

DGNews 2.1 - 'NewsID' SQL Injection

source: https://www.securityfocus.com/bid/24212/info DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploits could allow an attacker to compromise the application, access or modif...

DGNews 1.5.1/2.1 - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/24201/info DGNews is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploits could allow an attacker to compromise the application, access or modif...

SonicBB 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

FipsCMS 2.1 - pid SQL Injection

FipsCMS 2.1 - pid SQL Injection source: https://www.securityfocus.com/bid/23850/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection

source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

Burak Yilmaz Blog 1.0 - 'BRY.asp' SQL Injection

source: https://www.securityfocus.com/bid/23678/info Burak Yilmaz Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Phorum 5.1.20 - 'admin.php' Groups Module Edit/Add Group Field SQL Injection

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

DropAFew 0.2 - search.php?delete Action id SQL Injection

DropAFew 0.2 - search.php?delete Action id SQL Injection source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

DropAFew 0.2 - 'search.php?delete Action id' SQL Injection

source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

UBBCentral UBB.Threads 6.1.1 - UBBThreads.php SQL Injection

UBBCentral UBB.Threads 6.1.1 - UBBThreads.php SQL Injection source: https://www.securityfocus.com/bid/23369/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

W-Agora 4.2.1 - change_password.php?userid Cross-Site Scripting

W-Agora 4.2.1 - changepassword.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently...

Particle Blogger 1.2.1 - Archives.php SQL Injection

Particle Blogger 1.2.1 - Archives.php SQL Injection source: https://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Tyger Bug Tracking System 1.1.3 - login.php?PATH_INFO Cross-Site Scripting

Tyger Bug Tracking System 1.1.3 - login.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/22799/info Tyger Bug Tracking System is prone to multiple input-validation vulnerabilities, including one SQL-injection issue and two cross-site scripting issues, because the...

ibProArcade 2.5.9+ - Arcade.php SQL Injection

ibProArcade 2.5.9+ - Arcade.php SQL Injection source: https://www.securityfocus.com/bid/22575/info ibProArcade is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...