CubeCart 3.0.x - Multiple Input Validation Vulnerabilities

CubeCart 3.0.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/19563/info CubeCart is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied...

CubeCart 3.0.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/19563/info CubeCart is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could...

CLUB Nuke 2.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/19442/info CLUB-Nuke is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...

XennoBB 2.1 - profile.php Multiple SQL Injections

XennoBB 2.1 - profile.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19374/info XennoBB is prone to multiple SQL injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker ...

Banex PHP MySQL Banner Exchange 2.21 - signup.php?site_name SQL Injection

Banex PHP MySQL Banner Exchange 2.21 - signup.php?sitename SQL Injection source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied...

Banex PHP MySQL Banner Exchange 2.21 - admin.php Multiple SQL Injections

Banex PHP MySQL Banner Exchange 2.21 - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied...

LinksCaffe 3.0 - links.php Multiple SQL Injections

LinksCaffe 3.0 - links.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application...

LinksCaffe 3.0 - links.php?newdays Cross-Site Scripting

LinksCaffe 3.0 - links.php?newdays Cross-Site Scripting source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...

LinksCaffe 3.0 - 'counter.php?tablewidth' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

LinksCaffe 2.03.0 - Authentication Bypass

LinksCaffe 2.03.0 - Authentication Bypass source: https://www.securityfocus.com/bid/19763/info LinksCaffe is prone to an authentication-bypass vulnerability because of a lack of required authentication on the application's administrative script. An attacker can use administrative functions simply...

LinksCaffe 3.0 - 'links.php?newdays' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

LinksCaffe 3.0 - 'menu.inc.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting

PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

PHP Pro Bid 5.2.4 - 'viewfeedback.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...

MusicBox 2.3.4 - page SQL Injection

MusicBox 2.3.4 - page SQL Injection source: https://www.securityfocus.com/bid/19129/info MusicBox is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

Dream4 Koobi Pro 5.6 - showtopic SQL Injection

Dream4 Koobi Pro 5.6 - showtopic SQL Injection source: https://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities coul...

Invision Power Board 2.1.x IPSClass.PHP SQL Injection Vulnerability 1

Invision Power Board 2.1.x IPSClass.PHP SQL Injection Vulnerability 1. Webapps exploit for php platform source: http://www.securityfocus.com/bid/18984/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize...

Dream4 Koobi Pro 5.6 - 'showtopic' SQL Injection

source: https://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an attacker to compromise the...

LifeType 1.0.5 - index.php?Date SQL Injection

LifeType 1.0.5 - index.php?Date SQL Injection source: https://www.securityfocus.com/bid/18835/info LifeType is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...